competition-file-parser-chain

Warn

Audited by Socket on Jun 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is internally coherent as a sandboxed CTF file-parser tracing workflow and shows no direct exfiltration, credential use, or installer abuse, but it materially equips an AI agent for offensive security analysis of parser/deserialization chains. Risk is driven by dual-use exploit-analysis capability and transitive reliance on another skill, not by malicious data flows in this skill itself.

Confidence: 89%Severity: 58%
Audit Metadata
Analyzed At
Jun 20, 2026, 03:16 AM
Package URL
pkg:socket/skills-sh/zhaoxuya520%2Freverse-skill%2Fcompetition-file-parser-chain%2F@c10a69b5b4ff3c1c009c5cc318243dc9f6069ae1a61162d23ecc060de549e108
Security Audit — socket — competition-file-parser-chain