graphql-and-hidden-parameters

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK skill: its footprint is coherent with its stated purpose, but that purpose is to equip the agent for offensive security testing against APIs. There is no clear malware behavior, credential theft, or suspicious installer path in this text, yet the skill materially increases the agent's ability to probe authorization flaws and hidden functionality on live targets.

Confidence: 87%Severity: 78%
Audit Metadata
Analyzed At
Sep 15, 2026, 02:13 PM
Package URL
pkg:socket/skills-sh/yaklang%2Fhack-skills%2Fgraphql-and-hidden-parameters%2F@21c6ed188d64159aa2b97eb4516dd910672af0a6e1780cf78c9171812153f5f2
Security Audit — socket — graphql-and-hidden-parameters