cdk-escape

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

该技能的实际用途是为 AI 代理提供容器逃逸与渗透能力,属于高风险 offensive security skill。其能力与描述一致,但范围本身危险,且侧载二进制的安装方式进一步增加供应链风险;应判定为高风险、可疑而非确认恶意。

Confidence: 92%Severity: 93%
Audit Metadata
Analyzed At
Apr 22, 2026, 10:08 AM
Package URL
pkg:socket/skills-sh/wgpsec%2FAboutSecurity%2Fcdk-escape%2F@d55b577f54bd4182be0652b8395743f45f8d994d
Security Audit — socket — cdk-escape