transferring-files

Fail

Audited by Socket on Sep 21, 2026

2 alerts found:

MalwareSecurity
MalwareHIGH
SKILL.md

MALICIOUS. This skill is purpose-built for offensive post-compromise operations: exfiltration, covert channels, evasion, and remote payload execution. Its actual footprint is fundamentally incompatible with a benign file-transfer helper, and the arbitrary download-execute paths create extreme risk even aside from the explicit exfiltration guidance.

Confidence: 98%Severity: 98%
SecurityMEDIUM
references/command-catalogs.md

The supplied artifact is a command catalog, not self-executing malware. However, it contains explicit procedures for sensitive-data exfiltration, remote payload download and execution, LOLBin abuse, antivirus-signature evasion, and database-enabled operating-system command execution. It should be treated as high-risk offensive tradecraft documentation and should not be used in production environments without explicit authorization. Malware intent cannot be established from documentation alone, but the content materially facilitates malicious activity.

Confidence: 98%Severity: 82%
Audit Metadata
Analyzed At
Sep 21, 2026, 11:02 AM
Package URL
pkg:socket/skills-sh/trilwu%2Fsecskills%2Ftransferring-files%2F@e86ea5165c4069952c609cb8ba71dcb58b506926b4b4a31bdcb2ce608b4755ae