offensive-linux-role

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly instructs the agent to examine sensitive locations like ~/.ssh/ and .bash_history and to "provide the exact output" of findings, which requires including secret values (private keys, passwords, tokens) verbatim in the agent's output.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document is explicit offensive operational guidance—detailing foothold stabilization, living-off-the-land tactics, privilege escalation checks, persistence, lateral pivoting, and artifact cleanup—to maintain and expand unauthorized access, which is clearly malicious.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). This role explicitly instructs the agent to perform reconnaissance, privilege escalation, and persistence/pivot activities on a compromised Linux host (checking sudo/SUIDs/cron/ssh, upgrading TTY, storing/executing tools in /tmp or /dev/shm, and maintaining access), which encourages modifying system state and creating backdoors.