offensive-shellcode

Fail

Audited by Snyk on May 8, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 1.00). These GitHub repositories host offensive, dual‑use tooling (shellcode builders, loaders, injectors, AV/EDR bypasses and PE→shellcode converters) that can readily be used to build and distribute malware, so downloading or executing artifacts from them—especially unvetted releases or from lesser‑known authors—is high risk.

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 1.00). This content provides explicit, actionable instructions and code for building and deploying shellcode, process injection, evasion techniques, and a working reverse shell that connects to a C2 and spawns a remote command shell, i.e., clear backdoor/remote execution tooling.

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt provides detailed, actionable instructions and code for building and executing shellcode, injecting and executing payloads, modifying system memory and system binaries, and evading security (including direct syscalls, DLL/prologue overwrites, PE tampering and macOS signed-volume manipulation), which explicitly push compromising and persisting on the host.

Issues (3)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

E006
CRITICAL

Malicious code pattern detected in skill scripts.

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
May 8, 2026, 03:33 AM
Issues
3
Security Audit — snyk — offensive-shellcode