snailsploit/claude-red103 installs
offensive-dependency-confusion
A reusable agent skill published by snailsploit/claude-red.
How do I install this agent skill?
npx skills add https://github.com/snailsploit/claude-red --skill offensive-dependency-confusionIs this agent skill safe to install?
- Gen Agent Trust Hubfail
The skill provides comprehensive instructions and code templates for performing dependency confusion attacks. It includes functional proof-of-concept (PoC) scripts that exfiltrate environment metadata (hostname, username, CI status, etc.) to external servers via HTTP and DNS. It also demonstrates reconnaissance techniques involving the parsing of untrusted external files, which introduces an indirect prompt injection surface.
- Socketfail
1 alert: gptMalware
- Snykwarn
Risk: MEDIUM · 1 issue
How can the creator link this skill?
Add the canonical catalog link to the repository README so users can inspect current installs and available audits. The publishing guide covers the complete discovery path.
<a href="https://skillzs.dev/skills/snailsploit/claude-red/offensive-dependency-confusion">View offensive-dependency-confusion on skillZs</a>