cobalt-strike-malleable-c2-development
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill is a collection of Markdown documentation files providing technical guidance on Malleable C2 profile development for Cobalt Strike. It includes configuration examples for HTTP, HTTPS, and DNS beacons.
- [SAFE]: The documentation describes various security-relevant techniques such as process injection, reflective loading, and data transformation (e.g., XOR, Base64, RC4). These descriptions are educational in nature and serve the skill's primary purpose of assisting red team operators and security researchers.
- [SAFE]: Examples within the files contain placeholder values for sensitive fields like 'password' and 'keystore', which are clearly intended for user customization and do not represent actual credential exposure.
- [SAFE]: No executable code, scripts, or automated tools are included in the skill package; it consists entirely of descriptive text, configuration examples, and documentation assets.
Audit Metadata