The Agent Skills Directory

[SAFE]: The skill provides a comprehensive framework for malware analysis, including file identification, string extraction, and packer detection using standard utilities like file, sha256sum, strings, and rabin2. These commands are used for their intended analytical purposes on target samples.
[SAFE]: The instructions for static and dynamic analysis recommend professional tools such as IDA Pro, Ghidra, Wireshark, and Process Monitor. The methodology emphasizes the use of isolated environments (VMs) and network simulation (INetSim, FakeNet), which aligns with security best practices for handling potentially malicious files.
[SAFE]: The sections detailing persistence mechanisms, evasion techniques, and C2 communication are educational and descriptive, intended to help the analyst recognize these patterns in suspect software rather than instructing the agent to implement them.
[SAFE]: The skill contains a dedicated 'Ethical Guidelines' section that explicitly restricts the agent from assisting in the creation or distribution of malware or performing unauthorized offensive operations, reinforcing its defensive and professional intent.

malware-analyst