red-team-review

Warn

Audited by Socket on Oct 19, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Purpose and capabilities are internally consistent: this is a genuine adversarial review skill, not a credential-harvesting or supply-chain lure. Risk is elevated because it equips an AI agent to perform autonomous red-team/security probing and execute project code in scratch environments, but there is no evidence of malicious install paths, credential theft, or third-party exfiltration in the provided text.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Oct 19, 2026, 11:20 PM
Package URL
pkg:socket/skills-sh/webreactiva%2Fyesyak%2Fred-team-review%2F@eb14c52b1ba4cb50998ad668f3f1af96a05294dffcb67d1d79e94949b65cb224