performing-firmware-malware-analysis

Warn

Audited by Socket on Mar 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s purpose and capabilities are broadly aligned, but it is a high-risk AI agent skill because it equips the agent with offensive-grade firmware analysis, reverse engineering, emulation, privileged execution, and active scanning against untrusted artifacts. There is no clear credential-harvesting or exfiltration behavior, so this is not confirmed malware; the main concerns are exploit-tool enablement, command execution scope, and moderate supply-chain ambiguity around installation guidance.

Confidence: 90%Severity: 82%
Audit Metadata
Analyzed At
Mar 15, 2026, 12:28 AM
Package URL
pkg:socket/skills-sh/mukul975%2FAnthropic-Cybersecurity-Skills%2Fperforming-firmware-malware-analysis%2F@90714d4847b06e38048d11afe7304eb3f0542a0e