windows-uac-bypass

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly requires the agent to record and report "New credentials or tokens found" and save evidence files, which forces the LLM to include secret values verbatim in its output/files (high exfiltration risk).

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document provides explicit, deliberate instructions for privilege escalation, remote code execution, and persistence—including UAC auto-elevating binary hijacks, COM hijacking, MSI-based AlwaysInstallElevated abuse (with msfvenom reverse shells), base64-encoded PowerShell reverse shells, creation of backdoor users, and registry/startup/Winlogon/Active Setup persistence—which are clear malicious/backdoor techniques and pose a high abuse risk.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt explicitly instructs the agent to perform UAC bypass techniques and make persistent, privilege-escalating changes (registry hijacks, COM hijacks, MSI payloads that can add users/run as SYSTEM, autorun/Run key modifications), which directly modify system state and escalate privileges on the host.