pentest-commands
Audited by Socket on Feb 28, 2026
1 alert found:
MalwareThis skill is an offensive pentesting command reference that explicitly instructs how to scan, brute-force, exploit, and gain remote shells on targets. As a skill for an AI agent, it provides the exact operational steps required to carry out high-impact, potentially illegal actions (exploitation, reverse shells, credential cracking). There is no obfuscation or remote installer pattern, but the functional footprint (payload generation, handler setup, brute force, exploit usage) is inherently dangerous if executed autonomously or against targets without explicit authorization. Use of this skill by an automated agent should be restricted, require explicit human authorization per action, and be subject to strict audit and safeguards. If the intended use is only to provide command examples to a human operator, the documentation should be delivered as read-only guidance with no capability for automated execution or direct shell access.