html-injection-testing

Fail

Audited by Socket on Sep 17, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

MALICIOUS. The skill is an offensive exploit playbook whose core functionality is to inject phishing content, deface sites, and harvest credentials via attacker-controlled endpoints. Install trust is mostly ordinary, but the purpose-capability mismatch and explicit exfiltration/credential-theft guidance make the skill fundamentally incompatible with a legitimate benign testing skill.

Confidence: 97%Severity: 98%
Audit Metadata
Analyzed At
Sep 17, 2026, 03:15 PM
Package URL
pkg:socket/skills-sh/zebbern%2Fclaude-code-guide%2Fhtml-injection-testing%2F@24de10f0a349e967f37f1dfe3cb2effbe51a40e5aefc158c8a44d8eb1353b9ae
Security Audit — socket — html-injection-testing