format-string-exploitation

Warn

Audited by Socket on Apr 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally coherent as an exploitation playbook and shows little supply-chain or credential risk, but it gives an AI agent explicit offensive security capabilities for memory corruption exploitation and post-exploitation code execution. That makes the overall skill high risk despite not looking like credential theft or malware.

Confidence: 92%Severity: 90%
Audit Metadata
Analyzed At
Apr 9, 2026, 01:14 PM
Package URL
pkg:socket/skills-sh/yaklang%2Fhack-skills%2Fformat-string-exploitation%2F@8776222fb724084ca986ec6c4e77f1a94e580569