ffuf-fuzz

Warn

Audited by Socket on Oct 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

该 skill 与其声明用途一致,但用途本身是为 AI 代理提供进攻性 Web 枚举和爆破能力,包含登录爆破、参数 fuzz、虚拟主机枚举和凭据化请求。未发现恶意安装链、隐蔽外传或凭据窃取证据,因此不是确认恶意软件;但作为面向代理的安全/利用工具,现实滥用风险高,应归类为高风险可疑技能。

Confidence: 93%Severity: 84%
Audit Metadata
Analyzed At
Oct 11, 2026, 09:52 AM
Package URL
pkg:socket/skills-sh/wgpsec%2Faboutsecurity%2Fffuf-fuzz%2F@20bb27abbf9240fe84d0452d3871abb0d0f84dd2e7f17a80be92fbb044a67068