performing-credential-access-with-lazagne

SUSPICIOUS/HIGH-RISK skill. The install source is broadly consistent with the LaZagne project and not strong evidence of malware, but the skill’s purpose is to give an AI agent credential-access and follow-on credential-validation capability on compromised endpoints. That offensive scope, combined with handling of harvested credentials and guidance for lateral movement, makes it inappropriate for general agent deployment and high security risk even though it is internally aligned with its stated red-team purpose.

The fragment is a credential-audit wrapper and documentation around LaZagne. It contains high-impact credential collection functionality and handles recovered secrets in plaintext, creating a significant security and authorization risk. No direct malware behavior such as exfiltration or persistence is shown, but use should be restricted to authorized environments, with the LaZagne executable pinned and verified, least-privilege module selection, protected output files, and redacted handling of results.

The content is a credential-theft and lateral-movement playbook. It explicitly covers extraction of sensitive credentials, security-tool awareness, privilege escalation, exfiltration planning, validation of stolen credentials, and propagation to additional systems. It is not obfuscated and contains no executable malware in the supplied fragment, but its intended operational behavior is clearly malicious or unauthorized and presents a high security risk.