csp-bypass-advanced

Warn

Audited by Socket on Apr 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally coherent as an offensive security/exploitation guide, but its actual purpose is to help an AI agent bypass CSP and exfiltrate data from targets. There are no install-trust or credential-forwarding concerns, yet the exploit and exfiltration content makes it a high-risk security skill inappropriate for general agent use.

Confidence: 92%Severity: 88%
Audit Metadata
Analyzed At
Apr 9, 2026, 01:13 PM
Package URL
pkg:socket/skills-sh/yaklang%2Fhack-skills%2Fcsp-bypass-advanced%2F@cdaca8a1f1deabaaaabea39674675df4a0b03992