mobile-backend

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

该 skill 与其宣称用途基本一致,但其用途本身就是为 AI 代理提供进攻性安全测试能力,覆盖认证、越权、支付与竞态等高影响场景,整体应判为高风险而非恶意。主要风险来自 offensive use、对不受信任目标内容的处理后执行,以及对未验证 spray 工具的轻度供应链不确定性。

Confidence: 89%Severity: 86%
Audit Metadata
Analyzed At
Apr 22, 2026, 07:59 AM
Package URL
pkg:socket/skills-sh/wgpsec%2FAboutSecurity%2Fmobile-backend%2F@9e38f2abb5eb9d68b2670b522952dd73655a9b71