shellcode-dev
Fail
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: HIGHCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents low-level API calls for memory manipulation and process injection, including VirtualAlloc, VirtualProtect, and CreateRemoteThread, which are commonly used in malware development to execute code within a host process.\n- [REMOTE_CODE_EXECUTION]: Provides specific code patterns and logic for the 'Allocate-Write-Execute' sequence, which facilitates the execution of arbitrary machine code (shellcode) in memory.\n- [EXTERNAL_DOWNLOADS]: Includes references and links to several third-party repositories for offensive security tools, including Donut, sRDI, Pe2shc, and Amber, used for creating position-independent code payloads.\n- [PROMPT_INJECTION]: Details methods for evading security software, such as API hashing (ROR13) to conceal function imports, null-byte avoidance to bypass string-based detection, and environment verification (sandbox detection) to avoid analysis.
Recommendations
- AI detected serious security threats
Audit Metadata