mitm-find-ssrf

Warn

Audited by Socket on Mar 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK skill. Its footprint matches its stated purpose, but that purpose is offensive security for an AI agent: active SSRF discovery and exploitation, cloud metadata probing, and blind callback confirmation via known interception services. Install provenance is mostly coherent, but the exploit focus and exfiltration-style OOB endpoints make this unsafe to grant to an autonomous agent.

Confidence: 96%Severity: 91%
Audit Metadata
Analyzed At
Mar 24, 2026, 09:22 PM
Package URL
pkg:socket/skills-sh/instavm%2Fsecurity-skills%2Fmitm-find-ssrf%2F@9f26e8bd661e8dd5063af2b248633d0acc8a741c