skills/zhaoxuya520/ai-fullstack-delivery-workflow/competition-ad-certificate-abuse/Socket

competition-ad-certificate-abuse

Warn

Audited by Socket on Jul 30, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

该技能没有明显的安装器、凭证窃取或外传路径，但其核心用途是为代理提供 AD CS/证书滥用的进攻性安全指导，和普通帮助型技能不成比例。整体更像高风险安全能力而非恶意窃密：应判为可疑/高风险，不是确认恶意软件。

Confidence: 89%Severity: 78%

Audit Metadata

Analyzed At

Jul 30, 2026, 12:51 PM

Package URL

pkg:socket/skills-sh/zhaoxuya520%2Fai-fullstack-delivery-workflow%2Fcompetition-ad-certificate-abuse%2F@671285f8d2090bc9b6a44ed5e40e074f658eb089d8a3efb04879112fb6d35f7e