exploiting-broken-link-hijacking

Warn

Audited by Socket on Mar 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is purpose-aligned as an offensive security playbook, but its purpose itself is high risk for an AI agent. It enables active exploitation and real-world claiming of external resources, uses third-party security tools, and can drive consequential actions beyond passive auditing.

Confidence: 92%Severity: 90%
Audit Metadata
Analyzed At
Mar 15, 2026, 10:51 PM
Package URL
pkg:socket/skills-sh/mukul975%2FAnthropic-Cybersecurity-Skills%2Fexploiting-broken-link-hijacking%2F@40acbdc408b39fa4ef7e7ca288a8597841edc096