pop-pentesting

Warn

Audited by Socket on Aug 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

该 Skill 的实际能力与“POP3 渗透测试”声明一致,但其一致性来自于明显的攻击性用途:枚举、爆破、邮件内容提取、凭据收集和漏洞利用。未见直接恶意投毒式安装或隐蔽外传端点,但它为 AI Agent 提供了高风险 offensive security 能力,并可能导致未经充分审批的真实攻击与敏感数据提取。总体判定为 SUSPICIOUS:不是确认恶意软件,但属于高风险攻击技能。

Confidence: 93%Severity: 89%
Audit Metadata
Analyzed At
Aug 12, 2026, 03:50 PM
Package URL
pkg:socket/skills-sh/wgpsec%2Faboutsecurity%2Fpop-pentesting%2F@280bc539583911fe31b352870f0b79cbf1029ba342bc579cbfe4c2c9f47170b3
Security Audit — socket — pop-pentesting