The Agent Skills Directory

[SAFE]: The skill implements logic to analyze system autostart entries for common malware indicators such as missing digital signatures and suspicious file locations. The analysis is performed locally on data provided by the user or collected via authorized tools.- [COMMAND_EXECUTION]: The Python code uses subprocess.run to call the autorunsc64.exe binary. This is a legitimate use of command execution to interface with a standard system analysis utility. The command is constructed as a list of arguments, mitigating shell injection risks.

analyzing-malware-persistence-with-autoruns