competition-malware-config

Fail

Audited by Socket on Jul 30, 2026

2 alerts found:

SecurityMalware
SecurityMEDIUM
SKILL.md

该技能目的与能力基本一致,但它本质上是面向 AI 代理的恶意软件分析/逆向专用技能,按能力类别属于高风险安全工具。未见直接恶意载荷、凭据窃取或异常外传,但公开安装链依赖第三方 GitHub 仓库与未锁定内容,增加了供应链风险;整体应归类为 SUSPICIOUS / 高风险 vulnerable,而非确认恶意。

Confidence: 89%Severity: 76%
MalwareHIGH
references/malware-config.md

The fragment is a descriptive malware configuration/staging blueprint rather than code. It signals a covert malware deployment workflow by detailing the transform chain, field-to-behavior mappings, and persistence/networking mechanisms. While not executing harm by itself, it provides operational guidance that could enable adversaries to construct or deploy malicious software if integrated with executable components.

Confidence: 65%Severity: 90%
Audit Metadata
Analyzed At
Jul 30, 2026, 12:52 PM
Package URL
pkg:socket/skills-sh/zhaoxuya520%2Fai-fullstack-delivery-workflow%2Fcompetition-malware-config%2F@d7d4ee9f19962da8497a32a8f9ec69d76649d1b1288c0e3af0ea20bd843f5457
Security Audit — socket — competition-malware-config