bug-bounty-methodology

Warn

Audited by Socket on Sep 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK skill. Its stated purpose is offensive bug bounty methodology, and the commands largely align with that purpose, but the skill materially equips an AI agent to conduct active security testing and post-compromise escalation, including explicit cookie/token theft and credential extraction guidance. There is no strong malware or stealth signal, but this is a high-risk offensive-security capability set inappropriate for broad autonomous agent use.

Confidence: 93%Severity: 84%
Audit Metadata
Analyzed At
Sep 28, 2026, 11:19 AM
Package URL
pkg:socket/skills-sh/woohyun212%2Fsecurity-skill%2Fbug-bounty-methodology%2F@567a8e87112d219ba1e726e932e3fe5c7a7f7d95e8735f4c974ca68056394576