building-c2-infrastructure-with-sliver-framework

SUSPICIOUS/HIGH-RISK skill. It is internally consistent with its declared Sliver C2 purpose, but that purpose is itself an offensive-security capability set that lets an AI agent deploy command-and-control infrastructure and operate implants. Main install provenance appears official, yet Armory introduces third-party transitive trust, and the guide explicitly disables TLS verification in one path. High security risk without clear evidence of covert credential theft or confirmed malware.

The code is readable and contains no apparent obfuscation or embedded malicious payload. Nevertheless, it is an operational Sliver C2 deployment wrapper that launches listeners and generates implants and beacons, giving it significant dual-use offensive capability. The main direct risks are arbitrary executable selection through --sliver-path, unrestricted report path writing, and execution of externally supplied C2 operations. Authorization is asserted only in text and is not technically enforced.