competition-zip-archive

Warn

Audited by Socket on Aug 5, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Purpose and capabilities are internally consistent for a ZIP-cryptanalysis CTF skill, and the visible data flow stays local with no credential harvesting signs. The main concerns are that it equips the agent with offensive security functionality and relies on unseen bootstrap/install scripts, so it is best classified as suspicious/high-risk tooling rather than malware.

Confidence: 87%Severity: 73%
Audit Metadata
Analyzed At
Aug 5, 2026, 12:59 PM
Package URL
pkg:socket/skills-sh/zhaoxuya520%2Freverse-skill%2Fcompetition-zip-archive%2F@421454d9d1b3364406a3ee23df43cc0d5accee82a2d5d3b9de8439d26683dea7