shadow-infrastructure-guard

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The content explicitly instructs building covert, persistent infrastructure and stealth access (ghost servers, stealth API endpoints, non-standard ports/protocols, encrypted maps and air‑gapped recovery) that enables backdoors, covert communications, evasion of detection, and potential data exfiltration or illicit remote control.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill explicitly instructs creating hidden "Ghost" servers and stealth API endpoints, using non-standard ports/protocols and managing network links—actions that imply installing services, changing system/network configurations and bypassing security controls, so it encourages modifying the host state.