web-vuln-mfa-bypass

Warn

Audited by Socket on Aug 19, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

High-risk offensive security skill. Its behavior is internally consistent with MFA bypass testing and uses official tooling with no obvious credential exfiltration or malicious installer, so it is not confirmed malware; however, it gives an AI agent practical exploit-oriented web security capabilities and uses live authentication artifacts, making the overall skill dangerous.

Confidence: 92%Severity: 86%
Audit Metadata
Analyzed At
Aug 19, 2026, 06:16 AM
Package URL
pkg:socket/skills-sh/woohyun212%2Fsecurity-skill%2Fweb-vuln-mfa-bypass%2F@6c26bd0c85e39299e3aa3b1752214c1f9bbdedf4d359d0b1a803771d70d76d00
Security Audit — socket — web-vuln-mfa-bypass