offensive-shellcode
Fail
Audited by Snyk on May 8, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 1.00). These GitHub repositories host offensive, dual‑use tooling (shellcode builders, loaders, injectors, AV/EDR bypasses and PE→shellcode converters) that can readily be used to build and distribute malware, so downloading or executing artifacts from them—especially unvetted releases or from lesser‑known authors—is high risk.
CRITICAL E006: Malicious code pattern detected in skill scripts.
- Malicious code pattern detected (high risk: 1.00). This content provides explicit, actionable instructions and code for building and deploying shellcode, process injection, evasion techniques, and a working reverse shell that connects to a C2 and spawns a remote command shell, i.e., clear backdoor/remote execution tooling.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt provides detailed, actionable instructions and code for building and executing shellcode, injecting and executing payloads, modifying system memory and system binaries, and evading security (including direct syscalls, DLL/prologue overwrites, PE tampering and macOS signed-volume manipulation), which explicitly push compromising and persisting on the host.
Issues (3)
E005
CRITICALSuspicious download URL detected in skill instructions.
E006
CRITICALMalicious code pattern detected in skill scripts.
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata