target-profiling

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

该技能与其声明用途基本一致,但用途本身就是渗透侦察与攻击筹划。未见明显凭据窃取或第三方中转外传,但它向 AI 代理提供高风险进攻性安全能力,并辅以主动扫描工具与攻击路径建议;应归为高风险、可疑但非确认恶意。

Confidence: 92%Severity: 88%
Audit Metadata
Analyzed At
Sep 23, 2026, 04:28 AM
Package URL
pkg:socket/skills-sh/wgpsec%2Faboutsecurity%2Ftarget-profiling%2F@15dbe024ef0cbbd873a9fec4d1799bd1354c5eb6621f6d2db609f09dd148c1c8