The Agent Skills Directory

[SAFE]: The skill provides legitimate utilities for threat hunting and DLL sideloading detection. All core functionality is localized to parsing logs and scanning local directories.
[EXTERNAL_DOWNLOADS]: The skill requires the python-evtx library for EVTX log parsing. This is a standard and well-known open-source tool for Windows forensic analysis.
[INDIRECT_PROMPT_INJECTION]: The skill parses external log files (Sysmon Event ID 7) and directory contents. While this involves processing untrusted data, the processing logic is restricted to technical parsing and the skill lacks dangerous capabilities such as network communication, privilege escalation, or arbitrary command execution that could be exploited by an injection attack.

detecting-dll-sideloading-attacks