sandbox-escape-techniques

Fail

Audited by Socket on Sep 15, 2026

2 alerts found:

MalwareSecurity
MalwareHIGH
SKILL.md

MALICIOUS. The skill is an offensive breakout and exfiltration playbook for AI agents: it teaches sandbox escape, host/container access, shell spawning, and arbitrary data theft. There is little supply-chain risk because nothing is installed, but the operational capability is fundamentally dangerous and unsuitable as a normal skill.

Confidence: 98%Severity: 97%
SecurityMEDIUM
SECCOMP_BYPASS.md

This fragment is explicitly designed to bypass Linux sandboxing (seccomp) and achieve offensive outcomes: opening a protected file ("/flag"), executing a shell, injecting syscalls into another process via ptrace, and exfiltrating data using file/pipe primitives such as sendfile/splice/tee or cross-process memory access. While the snippet alone is insufficient to prove what a specific dependency does at runtime, the content is strongly consistent with malicious tooling/sandbox-escape guidance and would be considered a severe supply-chain red flag if found inside a package’s executable code.

Confidence: 56%Severity: 78%
Audit Metadata
Analyzed At
Sep 15, 2026, 02:15 PM
Package URL
pkg:socket/skills-sh/yaklang%2Fhack-skills%2Fsandbox-escape-techniques%2F@f28a9d8ae3fd07e80ea73d4a0f32aa3bfca4102dcc8114aaf4f3ee3033dc801d
Security Audit — socket — sandbox-escape-techniques