bb-local-toolkit

Warn

Audited by Socket on Aug 27, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

This is not coherent as a low-risk helper skill: it is an offensive-security playbook that enables an AI agent to scan, probe, and validate exploits on external targets, including AI-specific prompt extraction and CI/CD attack chains. The install source is only mildly risky, but the core capability set, OOB exfiltration endpoints, and agentic exploit guidance make the skill high risk and suspicious rather than benign.

Confidence: 95%Severity: 90%
Audit Metadata
Analyzed At
Aug 27, 2026, 05:31 AM
Package URL
pkg:socket/skills-sh/xiaolai%2Fclaude-bughunter%2Fbb-local-toolkit%2F@12416a2373dc0700d22f0cfcfb13cf33a0fd16ca599c75d0eeba639e22460035
Security Audit — socket — bb-local-toolkit