ctf-reverse

SUSPICIOUS：该技能与“CTF 逆向”目的基本一致，没有明显凭据窃取或隐蔽外传，但它系统性赋予 AI 代理进行逆向、反调试绕过、运行时注入、补丁和部分攻防操作的能力，属于高风险安全/利用类技能。另有中高供应链风险，因多处依赖第三方工具安装且包含 curl|bash、git clone+执行、未固定版本及个别与官方文档不完全一致的安装说明。

The provided fragment is dominated by anti-debugging/anti-VM/anti-disassembly and anti-instrumentation techniques (signal handler gating, direct syscall ptrace, PEB/NtQueryInformationProcess checks, TLS callbacks, debug-register scanning, Frida probing, thread hiding, and self-integrity CRC/SHA checks). No explicit credential theft, persistence, or network exfiltration is shown in this fragment, but the intent appears to resist analysis and conditional termination on detection of debugging/sandboxing. Overall, this is a high anti-analysis capability and should be reviewed carefully; however, malware cannot be confirmed from the truncated/non-contextual snippet.