transferring-files
Audited by Socket on Sep 21, 2026
2 alerts found:
MalwareSecurityMALICIOUS. This skill is purpose-built for offensive post-compromise operations: exfiltration, covert channels, evasion, and remote payload execution. Its actual footprint is fundamentally incompatible with a benign file-transfer helper, and the arbitrary download-execute paths create extreme risk even aside from the explicit exfiltration guidance.
The supplied artifact is a command catalog, not self-executing malware. However, it contains explicit procedures for sensitive-data exfiltration, remote payload download and execution, LOLBin abuse, antivirus-signature evasion, and database-enabled operating-system command execution. It should be treated as high-risk offensive tradecraft documentation and should not be used in production environments without explicit authorization. Malware intent cannot be established from documentation alone, but the content materially facilitates malicious activity.