re-evasion

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally coherent for malware evasion analysis, but its stated purpose is itself high-risk: it equips an AI agent with offensive security guidance around AMSI/ETW bypasses, fileless execution, and LOLBin tradecraft. Official Microsoft tooling is mostly well aligned, but third-party/community binary sourcing for AMSITrigger adds trust concerns. Not confirmed malware, but a high-risk offensive skill.

Confidence: 88%Severity: 76%
Audit Metadata
Analyzed At
Sep 14, 2026, 09:12 AM
Package URL
pkg:socket/skills-sh/dslsdzc%2Frev-skills%2Fre-evasion%2F@3c2f97986fdda9289426b053fb40fa6610c5bfb5a752467767114028c0996aed