testing-for-business-logic-vulnerabilities

Warn

Audited by Socket on Mar 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent as an offensive-security guide for authorized business-logic testing, but it equips an AI agent with high-risk penetration-testing capabilities that can change state on real systems. There is no clear credential theft, exfiltration, or deceptive install behavior, so this is not confirmed malware; the main concern is dangerous offensive capability and potential misuse.

Confidence: 91%Severity: 83%
Audit Metadata
Analyzed At
Mar 15, 2026, 01:54 PM
Package URL
pkg:socket/skills-sh/mukul975%2FAnthropic-Cybersecurity-Skills%2Ftesting-for-business-logic-vulnerabilities%2F@2c771d23053c7d9655fdc9b0a6b55baebef8b25a