skills/xiaolai/claude-bughunter/bug-bounty/Socket

bug-bounty

Warn

Audited by Socket on Aug 27, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

The skill is internally consistent as a bug-bounty/offensive-security orchestrator, so it is not deceptive malware. However, it is a high-risk AI agent skill because it equips the agent to perform offensive security actions, consume untrusted content with tool access, attempt system-prompt extraction, and load additional offensive skills.

Confidence: 94%Severity: 90%

Audit Metadata

Analyzed At

Aug 27, 2026, 05:31 AM

Package URL

pkg:socket/skills-sh/xiaolai%2Fclaude-bughunter%2Fbug-bounty%2F@356efc79f15e7071efbbad04b17448470c99a47dd107fa565c343ac7df2fffa1