subdomain-takeover

Warn

Audited by Socket on Apr 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s actual footprint is an offensive security/exploitation playbook for taking control of victim subdomains, DNS, and mail paths. The main risk is not deceptive install behavior but that it equips an AI agent to perform real-world attack actions with high-impact outcomes.

Confidence: 93%Severity: 92%
Audit Metadata
Analyzed At
Apr 9, 2026, 01:13 PM
Package URL
pkg:socket/skills-sh/yaklang%2Fhack-skills%2Fsubdomain-takeover%2F@86775b5865eb48d6df81305780f5bd14f9de8c91