scanning-network-with-nmap-advanced

Warn

Audited by Socket on Apr 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is purpose-aligned as a pentest/network recon guide, but that purpose itself gives an AI agent high-risk offensive capability, including evasion and vulnerability scanning. Install trust is mostly acceptable for official Nmap tooling, but the third-party nmap-parse-output reference adds moderate supply-chain risk. No clear credential theft or covert exfiltration is present, so this is high-risk offensive enablement rather than confirmed malware.

Confidence: 90%Severity: 86%
Audit Metadata
Analyzed At
Apr 9, 2026, 06:49 PM
Package URL
pkg:socket/skills-sh/mukul975%2FAnthropic-Cybersecurity-Skills%2Fscanning-network-with-nmap-advanced%2F@4e9dbeaaaf6fc5a2784588879d271e5ee6255605