linux-persistence

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (medium risk: 0.30). The skill is an openly advertised post-exploitation playbook, which is assessed separately, but its anti-forensic steps (log clearing, auditd exclusions, fake timestamps, process hiding) conceal activity and weaken protections on the system the agent would act on, which is sketchy toward the user.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill is an explicit post-exploitation playbook for installing backdoors (reverse shells in cron, malicious systemd units, root SSH key injection, sudoers NOPASSWD escalation, LD_PRELOAD rootkits, PAM credential-logging modules, /etc/ld.so.preload edits, log clearing and auditd evasion), directly instructing the agent to modify system files requiring root and compromise the machine.