competition-lsass-ticket-material

Warn

Audited by Socket on Jul 30, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally coherent as a CTF/post-exploitation credential-analysis specialization, but its actual function is high-risk offensive security guidance for extracting and replaying LSASS/Kerberos/DPAPI secrets. The main concern is agent enablement of credential theft and replay, not hidden exfiltration or malware behavior in the text itself.

Confidence: 92%Severity: 88%
Audit Metadata
Analyzed At
Jul 30, 2026, 12:52 PM
Package URL
pkg:socket/skills-sh/zhaoxuya520%2Fai-fullstack-delivery-workflow%2Fcompetition-lsass-ticket-material%2F@2a2edf199ea02730d619625df65f303f167775f885b51e5dec524423341c57e8
Security Audit — socket — competition-lsass-ticket-material