portainer-tactics

Warn

Audited by Socket on Aug 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

该技能与其“后渗透/利用”定位一致,但它本质上是在为AI代理提供可操作的Portainer入侵与Docker逃逸战术。没有可疑安装链或第三方凭据转发,不过其攻击能力、认证突破流程和宿主机RCE指引使其构成高风险 offensive security skill,应判定为高风险而非确认恶意软件。

Confidence: 96%Severity: 93%
Audit Metadata
Analyzed At
Aug 12, 2026, 03:51 PM
Package URL
pkg:socket/skills-sh/wgpsec%2Faboutsecurity%2Fportainer-tactics%2F@a5c2835728fdd7df95f7b7852c456b42918a69df95459487c578046fc72566c6
Security Audit — socket — portainer-tactics