linux-privilege-escalation

SUSPICIOUS/HIGH-RISK skill. Its purpose and capabilities are internally consistent, but that purpose is explicit offensive privilege escalation for AI agents, including credential harvesting and system compromise. The main risk is the agentized exploitation capability itself, compounded by credential-file access and a curl|sh enumeration step from GitHub Releases.

This code fragment is a high-risk adversarial exploitation guide: it demonstrates multiple privilege-escalation paths using Linux capabilities and SUID binary abuse (PATH hijacking, library hijacking, TOCTOU), includes process injection via ptrace, and shows network sniffing and direct targeting of /etc/shadow. If packaged or distributed within a dependency, it could materially enable system compromise and credential theft. No clear benign purpose is evident from the fragment provided.

This artifact is a high-risk, offensive kernel/container exploitation playbook. It provides detailed targeting logic (kernel/version/security checks), direct execution instructions for privilege-escalation PoCs, guidance to modify sensitive system state (e.g., authentication files and privileges), and persistence recommendations. It also includes insecure supply-chain execution patterns (downloading and immediately executing remote scripts/binaries). Treat as malicious/weaponized content rather than a legitimate dependency.