The Agent Skills Directory

[COMMAND_EXECUTION]: The documentation in SKILL.md provides multiple shell commands for the user to install dependencies, build the framework from source using make, and start the teamserver. These are standard procedures for deploying security software.
[EXTERNAL_DOWNLOADS]: The skill clones the Havoc C2 framework source code from its official GitHub repository (github.com/HavocFramework/Havoc.git). GitHub is a well-known service, and the framework is a recognized tool in the security community.
[INDIRECT_PROMPT_INJECTION]: The Python scripts scripts/agent.py and scripts/process.py interact with external network endpoints and APIs. Specifically, agent.py processes JSON responses from the Havoc Teamserver API, and process.py evaluates HTTP headers and SSL certificate metadata. This constitutes an attack surface where a malicious or compromised remote server could provide unexpected input to the agent scripts. The risk is minimized by the intended use in controlled, authorized environments.
[SAFE]: The Python automation scripts (agent.py and process.py) disable SSL certificate verification (verify=False and ssl.CERT_NONE). While this is generally a security weakness, it is documented as a common configuration for development, lab, or internal C2 environments where self-signed certificates or IP-based access are prevalent. The scripts also include explicit disclaimers regarding authorized use.

building-red-team-c2-infrastructure-with-havoc