multi-layer-network

Fail

Audited by Socket on Sep 23, 2026

3 alerts found:

Securityx2Malware
SecurityMEDIUM
SKILL.md

SUSPICIOUS:技能目的与能力一致,但其一致性恰好体现在为 AI 代理提供完整的渗透、隧道和横向移动方法论。未见明显恶意植入、隐蔽外传或可疑安装器,但它属于高风险 offensive-security 技能,会直接增强对内网目标的攻击能力。

Confidence: 89%Severity: 81%
SecurityMEDIUM
references/tunnel-tools.md

该片段不是普通应用依赖代码,而是一份明确用于建立隐蔽网络隧道、访问内网、上传 Webshell 和进行横向活动的攻击操作指南。作为文档本身未表现出 npm 恶意代码特征,但其中命令在未经授权的环境中可导致严重安全影响。

Confidence: 98%Severity: 91%
MalwareHIGH
evals/evals.json

This fragment is a high-risk, attacker-oriented prompt/evaluation specification. While it is not executable code, it explicitly instructs generation of concrete tunneling/proxy configurations (FRP/chisel SOCKS pivoting) and HTTP tunneling via Neo-reGeorg-style web scripts to bypass strict egress restrictions. If shipped in a software supply chain, it should be treated as malicious capability enablement content requiring removal and security controls.

Confidence: 86%Severity: 95%
Audit Metadata
Analyzed At
Sep 23, 2026, 04:28 AM
Package URL
pkg:socket/skills-sh/wgpsec%2Faboutsecurity%2Fmulti-layer-network%2F@397fa68dedaeb4314fe5226e72c8d98f3817f8c84a1e11c4c8e9f1d43bdeb430