llm-ai-security

Warn

Audited by Socket on Sep 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent as an LLM security testing aid, but its actual capability set is offensive security tooling for AI agents. There is no installer or third-party credential-harvesting path, yet it meaningfully increases risk by enabling prompt injection, system prompt extraction, tool abuse, IDOR probing, exfiltration simulation, and token-exhaustion testing against live targets.

Confidence: 93%Severity: 79%
Audit Metadata
Analyzed At
Sep 28, 2026, 11:19 AM
Package URL
pkg:socket/skills-sh/woohyun212%2Fsecurity-skill%2Fllm-ai-security%2F@ea9768245132a50d7b5010f418add34d3e4aa561f507bfe0ab11b014fdc89b56