malware-analysis

Warn

Audited by Socket on Sep 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally consistent for malware analysis, and its install sources and VirusTotal data flow are largely legitimate. However, it grants an AI agent high-risk security-analysis and detonation capabilities, reads a local secrets file, and can upload samples to arbitrary sandbox endpoints, so overall risk is medium-high despite limited evidence of malicious intent.

Confidence: 90%Severity: 72%
Audit Metadata
Analyzed At
Sep 28, 2026, 11:19 AM
Package URL
pkg:socket/skills-sh/woohyun212%2Fsecurity-skill%2Fmalware-analysis%2F@dc5d9a7a4881bcdc9f87071041694bc2c5f49e844aa33ac8f06f99163a73df5e