performing-red-team-with-covenant

SUSPICIOUS. The skill is internally coherent with its stated purpose, and the install/data-flow story is mostly consistent with official Covenant usage. However, the purpose itself is an offensive C2/red-team capability that enables remote execution, payload generation, and lateral movement, making it a high-risk AI agent skill even without clear malware or credential theft behavior.

This is a readable Covenant C2 management and reporting client rather than an obviously implanted malware payload. It contains legitimate-looking authorized red-team features, but its task execution and launcher/listener capabilities can control compromised agents. The use of verify=False is a concrete security weakness that can expose credentials and bearer tokens through man-in-the-middle attacks. Review authorization and restrict network access before use; certificate verification should be enabled. The fragment may also be truncated or syntactically incomplete at the final main( call.