log-evasion

SUSPICIOUS: this skill’s footprint is coherent with its stated purpose, but that purpose is to help an AI agent perform offensive log evasion and anti-forensics. It provides concrete instructions to disable or blind security telemetry and selectively erase traces, which makes it high risk even without active exfiltration or a real installer.

The fragment contains highly actionable instructions and code for disabling security telemetry, bypassing AMSI and PowerShell protections, terminating EventLog functionality, modifying audit settings, and stealthily editing or clearing Windows logs. These behaviors are characteristic of defense evasion and anti-forensics. The inclusion of defensive detection advice provides context but does not remove the risk. Treat the containing file as unsafe unless its use is strictly controlled for authorized security testing.

The fragment contains highly suspicious offensive security guidance focused on log tampering, audit suppression, SIEM disruption, process hiding, and stealthy in-memory execution. It is not obfuscated and does not itself execute the described commands, but inclusion in a general-purpose package would represent a significant supply-chain and misuse risk and warrants review of the surrounding file and package context.