naabu-portscan
Warn
Audited by Socket on Apr 22, 2026
2 alerts found:
AnomalySecurityAnomalyevals/evals.json
LOWAnomalyLOW
evals/evals.json
No malware or obfuscated/payload code is present in this fragment. However, it is an operationally actionable configuration that explicitly enables offensive internal reconnaissance (port scanning and follow-on HTTP/vulnerability scanning) via ready-to-run toolchains. Treat as a high misuse-risk supply-chain artifact rather than a direct malicious binary/script.
Confidence: 60%Severity: 68%
SecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
该技能与其声明用途一致,不像伪装型恶意技能;但它明确赋予 AI 代理端口扫描、网段探测和安全扫描链能力,属于高风险攻击性安全工具。综合判断为 SUSPICIOUS:非确认恶意,但安全风险高,不适合在缺少严格授权与人工审批的环境中启用。
Confidence: 91%Severity: 82%
Audit Metadata