sleep-masking-dev
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes informational links to various security research projects and documentation hosted on GitHub and official Microsoft domains (e.g.,
github.com/Cracked5pider/Ekko,maorsabag.github.io, andlearn.microsoft.com). These references are provided for educational context and do not involve automated script execution or package installations. - [COMMAND_EXECUTION]: The documentation discusses advanced technical concepts involving low-level Windows API calls such as
NtFreeVirtualMemory,NtQuerySystemInformation, andNtSetInformationVirtualMemory. These are described as part of a conceptual state machine for memory masking and are not presented as commands for the agent to execute autonomously. - [SAFE]: The skill consists entirely of technical documentation and architectural guidance. It contains no executable scripts, hardcoded credentials, obfuscated code, or network exfiltration patterns. The content is consistent with its stated purpose of facilitating auth/lab development research.
Audit Metadata