competition-crypto-mobile

Warn

Audited by Socket on Jul 30, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally coherent for a CTF/mobile-reversing purpose, but it gives an AI agent high-risk offensive analysis guidance for APK/IPA hooking, trust-boundary inspection, and request-signing replay, while also relying on transitive trust in other skills. Lack of credential handling and lack of external installers lowers malware confidence, but the capability set is still a high security risk for an agent skill.

Confidence: 84%Severity: 78%
Audit Metadata
Analyzed At
Jul 30, 2026, 12:51 PM
Package URL
pkg:socket/skills-sh/zhaoxuya520%2Fai-fullstack-delivery-workflow%2Fcompetition-crypto-mobile%2F@aff28b9812b5c6438ae9a8e0d575a93f2f6b1862a30d23a04b2c94da00295d94
Security Audit — socket — competition-crypto-mobile