skills/mukul975/anthropic-cybersecurity-skills/abusing-shadow-credentials-for-privesc/Gen Agent Trust Hub
abusing-shadow-credentials-for-privesc
Warn
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The orchestration script
scripts/agent.pyuses thesubprocessmodule to execute external tools likecertipy. It also allows a user-specified path to thepywhisker.pyscript via the--pywhiskerargument, which is then executed. This pattern allows for the execution of arbitrary scripts if the input path is not strictly validated. - [EXTERNAL_DOWNLOADS]: The skill instructions and scripts rely on external dependencies downloaded from GitHub repositories (
ShutdownRepo/pywhiskeranddirkjanm/PKINITtools) and the Python Package Index (certipy-ad). These sources, while recognized in the security community, are external to the skill and are downloaded and executed at runtime.
Audit Metadata