cloud-pentest

Warn

Audited by Socket on Sep 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is purpose-aligned for authorized cloud pentesting and primarily uses official cloud APIs and well-known open-source audit tools, so it does not look malicious. However, it gives an AI agent high-impact offensive cloud assessment capability, requires broad cloud credentials, and relies on mutable unpinned third-party tooling, making it high security risk despite low malware likelihood.

Confidence: 86%Severity: 72%
Audit Metadata
Analyzed At
Sep 28, 2026, 11:19 AM
Package URL
pkg:socket/skills-sh/woohyun212%2Fsecurity-skill%2Fcloud-pentest%2F@11ac43daf989749e8f3d7a828cb12b595831dbdaa318d5a48bc2327cba83b8a3