judge-ctf

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent as a CTF judge, but it materially expands into offensive-security instruction for an AI agent by prescribing exploitation steps, brute force, enumeration, and flag-hunting actions. There is no malware or exfiltration behavior, but the capability itself is high-risk and disproportionate for a pure evaluation checklist.

Confidence: 93%Severity: 79%
Audit Metadata
Analyzed At
Apr 22, 2026, 07:59 AM
Package URL
pkg:socket/skills-sh/wgpsec%2FAboutSecurity%2Fjudge-ctf%2F@3e184351c55986e6917d9c0ea6b9431d9fe253a5