xxe-xml-external-entity

Fail

Audited by Socket on Sep 15, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

MALICIOUS. This skill is an offensive exploitation playbook for AI agents: it targets sensitive files, internal services, and external exfiltration channels, and it includes SSRF and RCE chains. While it lacks suspicious installer behavior, its actual purpose and data flows are explicitly harmful and incompatible with benign agent assistance.

Confidence: 97%Severity: 98%
Audit Metadata
Analyzed At
Sep 15, 2026, 02:15 PM
Package URL
pkg:socket/skills-sh/yaklang%2Fhack-skills%2Fxxe-xml-external-entity%2F@9d2397e0defb998ef37d23c63abeeaedf28890f72423b207b2d4c5da6c294242
Security Audit — socket — xxe-xml-external-entity