prompt-leak

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

High-risk offensive skill. It is internally consistent with its stated purpose, but that purpose is to extract hidden system prompts and internal AI configuration from target systems, which is a sensitive reconnaissance capability and system-prompt extraction abuse. No malware, installer, or credential-exfiltration code is present, but the skill materially enables prompt-injection and hidden-instruction disclosure attacks.

Confidence: 97%Severity: 86%
Audit Metadata
Analyzed At
Sep 23, 2026, 04:24 AM
Package URL
pkg:socket/skills-sh/wgpsec%2Faboutsecurity%2Fprompt-leak%2F@48cff31352da02d9630f1d74ea30b12d7b07cf4d75bee161700c6bf09929dd46