web-vuln-http-smuggling

Warn

Audited by Socket on Aug 19, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent and uses mostly legitimate tooling, but it is a high-risk offensive security skill for AI agents because it enables autonomous request smuggling testing against live targets. Risk comes from exploit capability and real-world impact, not from malware-like behavior or deceptive data flows.

Confidence: 93%Severity: 78%
Audit Metadata
Analyzed At
Aug 19, 2026, 06:16 AM
Package URL
pkg:socket/skills-sh/woohyun212%2Fsecurity-skill%2Fweb-vuln-http-smuggling%2F@6267ced0c489ace9ed11b6fb7343f0851425ee34050b5d2cabc22a3fabf59f21
Security Audit — socket — web-vuln-http-smuggling