fscan-scan

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

This skill is purpose-consistent but inherently high risk: it equips an AI agent with offensive scanning, brute-force, exploitation, remote execution, and persistence workflows. The upstream fscan project appears to be a real public source project with official GitHub releases, so this is not confirmed malware or a fake installer lure; however, the skill materially increases attack capability and forwards sensitive credentials/keys into an external security tool. Overall classification: SUSPICIOUS/HIGH RISK, not confirmed malicious.

Confidence: 94%Severity: 91%
Audit Metadata
Analyzed At
Sep 18, 2026, 09:30 AM
Package URL
pkg:socket/skills-sh/wgpsec%2Faboutsecurity%2Ffscan-scan%2F@cdc83d3d72f149aa6ae61fde5d27dda747527ab5e3a8c719b344605c865f9345
Security Audit — socket — fscan-scan