certify

High-risk offensive security skill. Its stated purpose openly includes AD CS exploitation and privilege escalation, and it documents a full attack chain from template discovery to certificate abuse and Kerberos ticket injection. The biggest trust issue is the unverifiable Certify.exe assumption: GhostPack does not publish official Certify binaries, and the skill's binary/runtime claims do not match upstream documentation. This is not confirmed malware, but it is a dangerous AI-agent skill with strong exploit capability and significant supply-chain risk.