bloodhound-enum

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

该技能不是明显恶意软件,也未见凭据被路由到可疑第三方;但其声明目的就是域渗透与 AD 攻击路径分析,属于高风险进攻性安全技能。依赖来源基本可验证,主要问题是它让 AI 代理具备真实内网侦察能力,并示范以命令行传递密码/哈希等敏感凭据,因此应判为高风险、可疑但非确认恶意。

Confidence: 92%Severity: 83%
Audit Metadata
Analyzed At
Sep 23, 2026, 04:28 AM
Package URL
pkg:socket/skills-sh/wgpsec%2Faboutsecurity%2Fbloodhound-enum%2F@7ce0ffd3009d80e938c3a34d4f15894b1203c4b564225917b2dc3c2122201ecb