sleep-masking-dev

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This content is high-risk: it explicitly documents techniques for in-memory hiding and evasion (permission flips, encrypting payloads in memory, APC/context/ROP dispatch, hooked sleep, memory bouncing, key rotation/wiping and telemetry minimization) that directly enable stealthy loaders/agents and malicious persistence/evasion.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill explicitly directs changing runtime/OS-visible state (permission flips RW↔RX/NOACCESS, APC/SetThreadContext manipulations, hooking sleep entry points, freeing/reallocating regions), which are actions that modify the machine/process state and enable evasion techniques.