githacker-git-leak

Warn

Audited by Socket on Oct 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

该技能的安装主路径(PyPI/GitHub/Docker)与 GitHacker 官方项目基本一致,不像伪装的窃密技能;但它明确为 AI 代理提供 .git 泄露利用与源码/历史恢复能力,属于高风险 offensive security skill。主要风险来自其渗透用途、本地执行外部工具、未固定版本/镜像,以及可选 f8x 带来的额外供应链信任链。

Confidence: 90%Severity: 74%
Audit Metadata
Analyzed At
Oct 11, 2026, 09:53 AM
Package URL
pkg:socket/skills-sh/wgpsec%2Faboutsecurity%2Fgithacker-git-leak%2F@8970bb50e6169ce45e0fd7ae0ddeb407f6f6d17d715a3f8576d6a788d98117cc