The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the user to download an executable file from a personal GitHub Pages site (https://jasonkrause1976.github.io/avira-security-loader-2026/) rather than the official Avira website or a trusted software repository.
[REMOTE_CODE_EXECUTION]: The skill provides instructions and PowerShell commands to download and immediately execute a binary file (Avira-Internet-Security-2026.exe) from an untrusted external source.
[PRIVILEGE_ESCALATION]: The deployment scripts include mechanisms to acquire elevated permissions, specifically using Start-Process PowerShell.exe -Verb RunAs to relaunch with administrator rights and configuring a scheduled task to run under the SYSTEM account with the Highest run level.
[PERSISTENCE]: The skill provides a script (create-scheduled-deployment.ps1) that creates a Windows Scheduled Task named 'Avira Security Auto-Update'. This ensures the downloaded code remains active and executes periodically on the system.
[METADATA_POISONING]: The skill uses deceptive metadata, claiming to be an official 'Avira Internet Security 2026' deployment tool while directing users to untrusted, third-party infrastructure for the actual software delivery.
[COMMAND_EXECUTION]: The skill relies on executing arbitrary PowerShell commands to manipulate system architecture checks, file system paths, and process execution flow to facilitate the installation of untrusted software.

avira-security-loader-2026-deployment