The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides instructions to clone a specific repository identified as suspicious and to pull a Docker container for sandboxing. These operations are part of the documented security investigation process.
[COMMAND_EXECUTION]: Provides various shell commands using standard tools like grep, strings, file, and xxd for analyzing file content and metadata.
[DATA_EXFILTRATION]: Includes a Go script to upload local files to VirusTotal for security scanning. While this involves sending file content to an external service, it is the intended and documented purpose of a malware analysis tool.
[REMOTE_CODE_EXECUTION]: Contains a code block illustrating how a malware loader might function, including network downloads and process execution. This code is explicitly marked as a non-functional example for educational purposes and is not intended for execution by the agent.

malware-analysis-dragonflyTomb-avast