Skills
Navigate
skills/mukul975/anthropic-cybersecurity-skills/building-c2-infrastructure-with-sliver-framework/Gen Agent Trust Hub

building-c2-infrastructure-with-sliver-framework

Fail

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: CRITICALREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The SKILL.md file instructs the user to execute curl https://sliver.sh/install | sudo bash. This pattern is risky as it executes unverified remote code with administrative privileges from an external source.
  • [COMMAND_EXECUTION]: The included scripts scripts/agent.py and scripts/process.py use the subprocess module to execute external system commands such as sliver-client and nslookup. This represents a functional capability for framework management and network diagnostics.
  • [EXTERNAL_DOWNLOADS]: The skill references https://c2.example.com in both SKILL.md and scripts/process.py. This URL has been flagged by automated scanners as potentially malicious. Additionally, the skill fetches deployment scripts from sliver.sh which is outside the verified trusted environment scope.
Recommendations
  • Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Sep 17, 2026, 10:00 PM