hardware-hardspoof-spoofing-toolkit
Fail
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONDYNAMIC_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to download a compressed archive (
hardsp00f-latest.tar.gz) from a personal GitHub Pages site (shantanu-u69.github.io) that is not associated with the skill author or a known trusted organization. - [REMOTE_CODE_EXECUTION]: The toolkit installation process involves downloading external code and executing it with root privileges, including loading kernel modules (
modprobe) and running system-level daemons. - [DYNAMIC_EXECUTION]: The skill uses runtime compilation (
make kernel-module) to build executable kernel modules from the downloaded source code before loading them into the system. - [PRIVILEGE_ESCALATION]: The skill requires extensive use of administrative privileges (
sudoon Linux, Administrator/pnputil on Windows) to install drivers, load kernel modules, and manage system services. - [PERSISTENCE]: The toolkit establishes persistence by creating and starting system-level services (
sc createon Windows,systemctlon Linux) to ensure the spoofing software remains active across reboots.
Recommendations
- AI detected serious security threats
Audit Metadata