red-team-tactics

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The document explicitly catalogs offensive TTPs (credential theft techniques like Kerberoasting/DCSync, persistence, C2, exfiltration, obfuscation, lateral movement and AD attacks) that are deliberate malicious patterns which can be directly abused to perform real-world intrusions despite being framed as red-team guidance.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt is an explicit red-team/attacker playbook that advises modifying services, exploiting sudo and SUID misconfigurations, editing cron/jobs, timestomping and log clearing, lateral-movement techniques, and other actions that directly encourage changing or compromising a machine's state and privileges.