competition-cloud-metadata-path

Warn

Audited by Socket on Jul 30, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent as a CTF cloud-metadata exploitation guide, but its actual function is to equip an AI agent with offensive security capabilities around SSRF, metadata access, and privilege escalation. No direct credential exfiltration or malicious payload is present in the provided text, yet the capability set is high risk by nature and the broader distribution evidence shows only modest install trust.

Confidence: 84%Severity: 78%
Audit Metadata
Analyzed At
Jul 30, 2026, 12:53 PM
Package URL
pkg:socket/skills-sh/zhaoxuya520%2Fai-fullstack-delivery-workflow%2Fcompetition-cloud-metadata-path%2F@c6b0a434c8adb3bfb5bbd23c110c2ffb9047e314a489d3778ee716fd13a6e361
Security Audit — socket — competition-cloud-metadata-path