ftp-pentesting

Warn

Audited by Socket on Aug 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

这是一个面向 AI Agent 的 FTP 进攻性渗透测试 Skill,能力与描述一致,但其实际用途是扫描、爆破、利用漏洞、上传 Webshell、关闭证书校验并通过 Bounce 攻击第三方主机。不存在明显伪装或可疑安装链,但按技能范围与现实影响看属于高风险 offensive security skill,而非普通运维/开发辅助技能。

Confidence: 95%Severity: 94%
Audit Metadata
Analyzed At
Aug 12, 2026, 03:53 PM
Package URL
pkg:socket/skills-sh/wgpsec%2Faboutsecurity%2Fftp-pentesting%2F@ded8c42b408e70a9e4bed6b559a2f4368117fb599b4f31a6bba7d06feda6f011
Security Audit — socket — ftp-pentesting