hunt-sqli

Warn

Audited by Socket on Aug 27, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent as an SQLi hunting playbook, but its purpose is inherently offensive and enables an AI agent to scan, exploit, extract data from, and potentially gain code execution on arbitrary external targets. There is little install-trust concern, but the exploit capability, credential forwarding to tooling, and post-exploitation guidance make the overall security risk high.

Confidence: 94%Severity: 82%
Audit Metadata
Analyzed At
Aug 27, 2026, 05:33 AM
Package URL
pkg:socket/skills-sh/xiaolai%2Fclaude-bughunter%2Fhunt-sqli%2F@752b85c17ccac27a2388d11b5c45fdeee467d77ab62ea8000ac8542def8634f6
Security Audit — socket — hunt-sqli