hunt-ato

Warn

Audited by Socket on Aug 27, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK skill. It is internally coherent as an ATO hunting taxonomy, but its actual purpose is to help an AI agent perform offensive security testing and chain real account-takeover techniques. There is little supply-chain risk in the text itself, but the exploit guidance, brute-force example, attacker-controlled callback flows, and transitive chaining make it a high-security-risk skill rather than benign reference material.

Confidence: 90%Severity: 82%
Audit Metadata
Analyzed At
Aug 27, 2026, 05:31 AM
Package URL
pkg:socket/skills-sh/xiaolai%2Fclaude-bughunter%2Fhunt-ato%2F@958c5fd7ea3e6c13d75c0030b5d64e8b2fed9f4683135bb4cf6808a2b32617af
Security Audit — socket — hunt-ato