ctf-crypto

Warn

Audited by Socket on Oct 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally consistent as a CTF crypto attack guide, but it materially enables offensive security actions and includes several unpinned third-party tool installs and GitHub-sourced utilities. I found no evidence of credential theft, covert exfiltration, or malicious pre-execution behavior, so this is better classified as a high-risk offensive skill than malware.

Confidence: 88%Severity: 76%
Audit Metadata
Analyzed At
Oct 11, 2026, 09:52 AM
Package URL
pkg:socket/skills-sh/wgpsec%2Faboutsecurity%2Fctf-crypto%2F@ccc4c6c39e71b99df84409359f96c2b63e3c8df2a80424152dc295a3984a8748