skills/yaklang/hack-skills/dangling-markup-injection/Socket

dangling-markup-injection

Fail

Audited by Socket on Sep 15, 2026

1 alert found:

Malware

MalwareSKILL.md

HIGH

MalwareHIGH

SKILL.md

MALICIOUS. The skill is fundamentally an exfiltration playbook: its purpose, examples, and data flows all center on stealing tokens and page content and sending them to attacker-controlled endpoints. No install-chain risk is present, but the capability itself is incompatible with a benign agent skill.

Confidence: 97%Severity: 98%

Audit Metadata

Analyzed At

Sep 15, 2026, 02:14 PM

Package URL

pkg:socket/skills-sh/yaklang%2Fhack-skills%2Fdangling-markup-injection%2F@bd1c3c11dd001a10aa4dd509b8181db52be105ca6c1b9c6ba6b8c8e69920ddf8