cloud-aksk-exploit

Fail

Audited by Socket on Sep 23, 2026

3 alerts found:

MalwareSecurityx2
MalwareHIGH
SKILL.md

This skill is malicious. Its purpose is to help an AI agent exploit stolen cloud credentials, enumerate permissions, take over resources, escalate privileges, and establish persistence/backdoors. The install surface is not the core problem; the core problem is the explicitly offensive post-compromise workflow and autonomous real-world impact on cloud accounts.

Confidence: 98%Severity: 99%
SecurityMEDIUM
references/aws-exploit.md

该内容不是恶意 npm 代码,但明确提供了 AWS 凭据滥用、敏感信息获取、权限提升、资源接管和持久化后门的可执行操作指南。若在未经授权的账户中执行,可能导致严重数据泄露、账户接管和持续未授权访问。应仅在明确授权的安全评估环境中使用,并禁止使用全局管理员策略、公开 SSH 规则及未受控的长期访问密钥。

Confidence: 99%Severity: 98%
SecurityMEDIUM
references/tencent-exploit.md

该片段不是正常的云服务库代码,而是一组具有明显攻击性的腾讯云账户接管和持久化操作指南。虽然命令本身在此处未被执行,也未发现混淆或直接网络外传实现,但其包含资源枚举、敏感配置读取、实例密码重置、创建 API 密钥及附加管理员策略等高危行为,不应在未获授权的账户或环境中使用。

Confidence: 99%Severity: 98%
Audit Metadata
Analyzed At
Sep 23, 2026, 04:26 AM
Package URL
pkg:socket/skills-sh/wgpsec%2Faboutsecurity%2Fcloud-aksk-exploit%2F@0b8ce9fdba4f8bdbd4264e40344aa6b828e360123699ded8c3249d6f53ad47fb