local-resources

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent and mostly local-only, but its stated purpose is to help an AI agent perform offensive security actions such as brute-forcing, fuzzing, and POC-driven testing. There is no clear credential theft, exfiltration, or malicious installer behavior, so this is not confirmed malware; the primary concern is enabling high-risk security/exploit activity.

Confidence: 94%Severity: 72%
Audit Metadata
Analyzed At
Apr 22, 2026, 10:10 AM
Package URL
pkg:socket/skills-sh/wgpsec%2FAboutSecurity%2Flocal-resources%2F@7a421afcd62fa020042ddd068b594e6d1728ad00