skills/vchirrav-eng/product-security-ai-skills/dast-nuclei/Socket

dast-nuclei

Warn

Audited by Socket on Aug 8, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

BENIGN for stated purpose but HIGH RISK as an AI agent capability: the skill coherently wraps the official Nuclei scanner with official install sources and no suspicious credential routing, yet it enables offensive vulnerability scanning against arbitrary targets and uses unpinned/latest installs and template updates.

Confidence: 89%Severity: 76%

Audit Metadata

Analyzed At

Aug 8, 2026, 01:48 PM

Package URL

pkg:socket/skills-sh/vchirrav-eng%2Fproduct-security-ai-skills%2Fdast-nuclei%2F@42f1aba897f9d678369ba2acbec29c8ef7f9fba24ac99b6f68d5a57d4fdbecc4