ccupp-password-profiler

Warn

Audited by Socket on Oct 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS。该技能的真实用途就是帮助AI代理进行定向密码猜测和爆破,能力与攻击目的完全一致,因此不是伪装型恶意软件,但属于高风险 offensive security skill。安装来源存在文档过时和分发路径不一致问题;虽有同作者GitHub/PyPI证据,仍不足以抵消其面向实际账户攻击的高风险属性。

Confidence: 90%Severity: 87%
Audit Metadata
Analyzed At
Oct 11, 2026, 09:52 AM
Package URL
pkg:socket/skills-sh/wgpsec%2Faboutsecurity%2Fccupp-password-profiler%2F@785ada7c9f0050c658e3b836009f9130acb469f285b94335e4d9c9f0cedb4400