injection-checking
Warn
Audited by Socket on Apr 22, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill is internally consistent as an injection-testing router, but its stated purpose is to enable offensive security workflows for an AI agent. This file alone has minimal supply-chain, credential, and exfiltration risk, yet it materially increases agent capability for exploit-oriented tasks, so overall risk is driven by offensive-use enablement rather than hidden behavior.
Confidence: 91%Severity: 72%
Audit Metadata