imap-pentesting

Warn

Audited by Socket on Oct 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

该技能与其声明用途高度一致,但其用途本身是面向渗透测试/攻击的 IMAP 枚举、爆破、邮件提取与漏洞利用指南。未见第三方凭据转发、隐蔽外传、恶意预执行或可疑安装源;不过它赋予 AI Agent 明确的 offensive security 能力,并包含对敏感邮箱内容的访问与 TLS 校验禁用示例,因此应归类为高安全风险但非确认恶意。

Confidence: 95%Severity: 82%
Audit Metadata
Analyzed At
Oct 16, 2026, 05:16 AM
Package URL
pkg:socket/skills-sh/wgpsec%2Faboutsecurity%2Fimap-pentesting%2F@36ee8a574101f920761ffe011bd451419bb6fb927f1fb85f45374bf82f1e6e90