re-evasion
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill is internally coherent for malware evasion analysis, but its stated purpose is itself high-risk: it equips an AI agent with offensive security guidance around AMSI/ETW bypasses, fileless execution, and LOLBin tradecraft. Official Microsoft tooling is mostly well aligned, but third-party/community binary sourcing for AMSITrigger adds trust concerns. Not confirmed malware, but a high-risk offensive skill.
Confidence: 88%Severity: 76%
Audit Metadata