hunt-xxe

Warn

Audited by Socket on Aug 27, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is an offensive exploitation playbook for XXE on arbitrary targets, with explicit OOB exfiltration, SSRF, sensitive file access, and defense-bypass guidance. Install trust is mostly benign, but the capability set is inherently high risk and disproportionate for a general AI agent skill.

Confidence: 96%Severity: 93%
Audit Metadata
Analyzed At
Aug 27, 2026, 05:33 AM
Package URL
pkg:socket/skills-sh/xiaolai%2Fclaude-bughunter%2Fhunt-xxe%2F@b1b29dbf79a95a6db3ab2d8ac6b77a212b3fd0d630e341550056b610155d3e67
Security Audit — socket — hunt-xxe