prompt-injection

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

High-risk offensive security skill. It is internally consistent as a prompt-injection/red-team guide, but it equips an AI agent with attack payloads for system-prompt extraction, secret access, tool-chain abuse, RAG poisoning, and exfiltration. No installer or hidden execution path is present, so this is not confirmed malware, but it is a dangerous exploit-oriented skill.

Confidence: 95%Severity: 91%
Audit Metadata
Analyzed At
Sep 23, 2026, 04:24 AM
Package URL
pkg:socket/skills-sh/wgpsec%2Faboutsecurity%2Fprompt-injection%2F@26db5cf4838fed2728c0cf91e898b406fefb2463c526eeba9fe75e7ab4c59cdf