testing-for-sensitive-data-exposure
Warn
Audited by Socket on Apr 7, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The skill is purpose-aligned as a penetration-testing guide, but it equips an AI agent with offensive security capabilities to enumerate secrets, inspect authenticated responses, and download exposed repositories. There is no clear credential-harvesting endpoint or deceptive data routing, so this is not confirmed malware, but it is a high-risk security skill because it enables impactful real-world security testing actions.
Confidence: 91%Severity: 84%
Audit Metadata