multi-layer-network
Fail
Audited by Socket on Sep 23, 2026
3 alerts found:
Securityx2MalwareSecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS:技能目的与能力一致,但其一致性恰好体现在为 AI 代理提供完整的渗透、隧道和横向移动方法论。未见明显恶意植入、隐蔽外传或可疑安装器,但它属于高风险 offensive-security 技能,会直接增强对内网目标的攻击能力。
Confidence: 89%Severity: 81%
Securityreferences/tunnel-tools.md
MEDIUMSecurityMEDIUM
references/tunnel-tools.md
该片段不是普通应用依赖代码,而是一份明确用于建立隐蔽网络隧道、访问内网、上传 Webshell 和进行横向活动的攻击操作指南。作为文档本身未表现出 npm 恶意代码特征,但其中命令在未经授权的环境中可导致严重安全影响。
Confidence: 98%Severity: 91%
Malwareevals/evals.json
HIGHMalwareHIGH
evals/evals.json
This fragment is a high-risk, attacker-oriented prompt/evaluation specification. While it is not executable code, it explicitly instructs generation of concrete tunneling/proxy configurations (FRP/chisel SOCKS pivoting) and HTTP tunneling via Neo-reGeorg-style web scripts to bypass strict egress restrictions. If shipped in a software supply chain, it should be treated as malicious capability enablement content requiring removal and security controls.
Confidence: 86%Severity: 95%
Audit Metadata