tradecraft-attack-chain

This skill is internally consistent with its declared red-team/pentest purpose, but that purpose is itself a high-risk offensive capability. It does not show clear malware behavior, hidden exfiltration, or suspicious third-party install paths; however, it equips an AI agent to plan and conduct multi-stage intrusions, credential theft, lateral movement, and evasion, so it should be classified as high-risk vulnerable rather than benign.

This is not executable malware and no malicious package behavior is observable in the fragment. It is, however, a highly actionable offensive playbook that includes credential theft, persistence, lateral movement, and EDR-evasion techniques. Treat it as potentially dangerous operational guidance; the fragment alone does not establish malicious intent or unauthorized use.