amass
Warn
Audited by Socket on Apr 16, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill is largely coherent with Amass's real purpose, and the main install source is official, so this is not confirmed malware. However, it is an offensive security/reconnaissance skill that enables active target interaction, uses mutable install instructions, and centralizes numerous API credentials, making it high-risk for an AI agent despite mostly legitimate data flows.
Confidence: 90%Severity: 76%
Audit Metadata