skills/yaklang/hack-skills/email-header-injection/Socket

email-header-injection

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill is purpose-built to help an AI agent perform email header injection, spoofing, and phishing-oriented exfiltration. There is no suspicious installer or credential-harvesting binary, but the capability itself is a high-risk offensive security function for an AI agent.

Confidence: 95%Severity: 86%

Audit Metadata

Analyzed At

Sep 15, 2026, 02:14 PM

Package URL

pkg:socket/skills-sh/yaklang%2Fhack-skills%2Femail-header-injection%2F@20850ed4277b4fb31cd33225463f4bf63e55f708c79853c66c7214efb4e0336a