password-reset-methodology

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent, but its stated purpose is offensive security guidance for exploiting authentication and password-reset weaknesses. There is no malware payload, installer abuse, or credential exfiltration path in the text, yet it materially increases an AI agent's ability to perform account-takeover and authorization-bypass testing on live targets.

Confidence: 93%Severity: 86%
Audit Metadata
Analyzed At
Sep 23, 2026, 04:27 AM
Package URL
pkg:socket/skills-sh/wgpsec%2Faboutsecurity%2Fpassword-reset-methodology%2F@cdc14119d1e83a6f66f3757581bacc8882e772600bfa55792ada225753e65e84