reverse-eng-edr-analysis

Warn

Audited by Socket on Oct 15, 2026

2 alerts found:

Securityx2
SecurityMEDIUM
SKILL.md

This skill is a high-risk offensive security capability focused on defeating EDR/AV, blinding telemetry, and enabling stealthy post-exploitation actions. It is internally consistent with its stated purpose, but that purpose is itself an exploit/evasion workflow for AI agents, so the correct classification is suspicious/high-risk rather than benign; there is no clear credential-harvesting or covert exfiltration to attacker infrastructure in the text, so it is not confirmed malware.

Confidence: 96%Severity: 91%
SecurityMEDIUM
cheatsheet.md

The visible material is highly actionable documentation for endpoint-defense evasion and anti-forensics, but it is not executable code and does not itself demonstrate malware behavior. Treat the surrounding file and its use as high risk; conclusions about runtime behavior require the remaining content.

Confidence: 97%Severity: 82%
Audit Metadata
Analyzed At
Oct 15, 2026, 10:30 AM
Package URL
pkg:socket/skills-sh/noorqureshi%2Fsecurity-skills%2Freverse-eng-edr-analysis%2F@41dd00d563664a6b49b682859a48524fac2125cb0b98bdf992defa6763efec99