The Agent Skills Directory

[SAFE]: The skill functions as a defensive security tool for malware analysis and threat hunting. It parses configuration files to identify indicators of compromise (IOCs).
[EXTERNAL_DOWNLOADS]: The documentation mentions installing dissect.cobaltstrike and pyMalleableC2. These are established open-source libraries in the cybersecurity community for analyzing Cobalt Strike artifacts.
[COMMAND_EXECUTION]: The agent.py script is a standard Python CLI tool that reads profile data and outputs analysis results. It does not use any dangerous functions like eval(), exec(), or os.system() to execute arbitrary code.
[DATA_EXFILTRATION]: No network operations or external data transmissions were detected. The script operates entirely on local file inputs provided by the user.

analyzing-cobaltstrike-malleable-c2-profiles