api-semantic-fuzz

Warn

Audited by Socket on Mar 31, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

该技能与其“exploit”定位一致,但它直接教 AI 代理执行 API 攻击测试、越权验证和定向 fuzz,属于高风险 offensive security 技能。未见可疑安装链或第三方凭据中转,因此更像高风险漏洞利用能力而非恶意窃密技能;整体应判为 SUSPICIOUS。

Confidence: 94%Severity: 89%
Audit Metadata
Analyzed At
Mar 31, 2026, 08:48 AM
Package URL
pkg:socket/skills-sh/wgpsec%2FAboutSecurity%2Fapi-semantic-fuzz%2F@ea6609cb3c5273977c2627f8d230bf72db9d0f67
Security Audit — socket — api-semantic-fuzz