http2-specific-attacks

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The documented installs are mostly coherent and not covert, but the skill’s core purpose is to equip an AI agent with offensive HTTP/2 exploitation and DoS techniques against arbitrary targets. That makes it a high-risk security skill even without credential theft or malware indicators.

Confidence: 93%Severity: 78%
Audit Metadata
Analyzed At
Sep 15, 2026, 02:15 PM
Package URL
pkg:socket/skills-sh/yaklang%2Fhack-skills%2Fhttp2-specific-attacks%2F@162bd7d5c4ec6740a8506a53276f7fb1836712e67c92d245daf1b5b08f9597b0
Security Audit — socket — http2-specific-attacks