hunt-ssrf

Warn

Audited by Socket on Aug 27, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

High-risk offensive security skill. Its stated purpose matches its capabilities, but those capabilities are explicitly exploitative: SSRF testing, OOB confirmation, internal service access, credential/token theft paths, exfiltration, and chaining to RCE on arbitrary targets. Not confirmed malware, but unsafe for general agent use.

Confidence: 95%Severity: 93%
Audit Metadata
Analyzed At
Aug 27, 2026, 05:32 AM
Package URL
pkg:socket/skills-sh/xiaolai%2Fclaude-bughunter%2Fhunt-ssrf%2F@aff3aced1d4009817fea4750bb620d5d29ebcba30aed24334b30ba637021397c
Security Audit — socket — hunt-ssrf