qa-tester-skill

Warn

Audited by Socket on Mar 31, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is coherent as a QA/security testing guide, but it grants an AI agent meaningful offensive web-testing capability against arbitrary targets and combines untrusted web content with action-taking browser automation. No clear malware or exfiltration endpoint is present, yet the operational security risk is high enough to treat it as a risky security-testing skill rather than a benign general QA helper.

Confidence: 90%Severity: 76%
Audit Metadata
Analyzed At
Mar 31, 2026, 02:06 AM
Package URL
pkg:socket/skills-sh/zzafergok%2Fskills%2Fqa-tester-skill%2F@60606417f4e8536ba22e7123205ee460c75d17e5
Security Audit — socket — qa-tester-skill