shellcode-dev

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). These GitHub repositories host PE-to-shellcode converters and reflective loaders (tools commonly used to create and deliver malware), so they are high-risk sources despite being on GitHub.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document provides explicit, actionable instructions for creating, delivering, and hiding shellcode (process injection, API resolution, obfuscation, evasion, and remote execution), clearly enabling unauthorized remote code execution and stealthy compromise.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). This skill contains detailed, actionable instructions for allocating/executing memory, performing process injection, modifying in-memory code (e.g., overwriting ntdll prologue), and other techniques that directly modify the host system and bypass security controls.