cot-injection

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

High-risk offensive security skill. Its capabilities match its stated purpose, but that purpose is to teach AI-agent exploit techniques that bypass validation, forge intermediate results, and induce unauthorized queries or sensitive actions. No installer, credential, or third-party data-flow concerns are present in the supplied content, but the exploit methodology itself makes the skill unsafe.

Confidence: 94%Severity: 88%
Audit Metadata
Analyzed At
Sep 23, 2026, 04:23 AM
Package URL
pkg:socket/skills-sh/wgpsec%2Faboutsecurity%2Fcot-injection%2F@92f49b38047368fefd4b75a91fd62aec3d79c6a40be58efa10f3efdaefe1b5b3