operating-sliver-c2

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill includes an explicit plaintext password ("Password123") shown being passed verbatim on a command line (sliver (SESSION) > make-token -u DOMAIN\user -p Password123), which requires the agent to output sensitive credentials directly.

---

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). The presence of direct release-download URLs for Sliver server/client binaries and an install endpoint that pipes a remote installer to bash are high-risk vectors for distributing malware/C2 implants even if hosted by the project's official sites.

---

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This content documents and automates use of the Sliver command-and-control framework and includes explicit commands and a helper script to generate implants, run remote commands, escalate privileges, harvest credentials, and pivot — behaviors consistent with high-risk C2/post-exploitation tooling and deliberate abuse.

---

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow in scripts/agent.py ingests outsider-authored free text via the exec --command CLI argument and passes it to Sliver’s interact.execute(...), causing the agent to read/relay arbitrary operator-supplied text output (stdout/stderr) back to the user.

---

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The SKILL.md install instructions explicitly run remote code (curl https://sliver.sh/install | sudo bash) and offer wget of release binaries (https://github.com/BishopFox/sliver/releases/latest/download/sliver-server_linux and https://github.com/BishopFox/sliver/releases/latest/download/sliver-client_linux) which are downloaded, made executable, and intended to be run, so these URLs are runtime external dependencies that execute remote code.

---

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly requires and instructs use of root/sudo (e.g., "Root or sudo" for privileged ports, "curl ... | sudo bash", and "sudo ./sliver-server"), which pushes the agent to obtain elevated privileges and modify the host state by installing/running system-level C2 services.