competition-zip-archive

Warn

Audited by Socket on Aug 5, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Purpose and capabilities are internally consistent for a ZIP-cryptanalysis CTF skill, and the visible data flow stays local with no credential harvesting signs. The main concerns are that it equips the agent with offensive security functionality and relies on unseen bootstrap/install scripts, so it is best classified as suspicious/high-risk tooling rather than malware.

Confidence: 87%Severity: 73%
Audit Metadata
Analyzed At
Aug 5, 2026, 12:59 PM
Package URL
pkg:socket/skills-sh/zhaoxuya520%2Freverse-skill%2Fcompetition-zip-archive%2F@421454d9d1b3364406a3ee23df43cc0d5accee82a2d5d3b9de8439d26683dea7
Security Audit — socket — competition-zip-archive