reverse-shell-techniques

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). All three URLs are direct attacker-controlled HTTP links referenced by the skill as download cradles and file-transfer endpoints for remote shells and payloads, making them high-risk sources for delivering malware.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This content is an explicit attack playbook providing step-by-step reverse/bind shells, web shells, payload generation, persistence and escalation techniques intended to establish unauthorized remote access and backdoors.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs creating and executing reverse/bind shells, web shells, payloads, download-and-execute cradles, and persistence (“implant backdoor”), which directs an agent to modify system state and carry out actions that compromise machines.