tool-delivery

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). These are attacker-controlled HTTP endpoints serving direct downloads of binaries and PowerShell scripts (untrusted .exe/.ps1) used in post‑exploitation/tool delivery, which matches high-risk malware distribution indicators.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This skill is clearly malicious: it provides step-by-step operational guidance to deliver and execute offensive tools (including mimikatz), establish tunnels/backdoors (frp/chisel), perform remote code execution, evade AV/forensics (UPX, AMSI bypass, timestomp, history clearing), and facilitate credential theft and lateral movement.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill explicitly instructs runtime fetching and execution of remote binaries/scripts (e.g., http://ATTACKER:8888/fscan and http://ATTACKER:8888/tool.exe / http://ATTACKER:8888/script.ps1 or SMB \ATTACKER\share\tool.exe) which are downloaded during execution and then run on the target, meeting the criteria for a high-risk external dependency.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill is explicit offensive malware/tool-delivery guidance: it tells an operator to run servers/listeners, transfer and execute offensive binaries, evade AV/AMSI and clean traces — actions that change and compromise the state of the machine executing them (the agent/operator host) and facilitate compromising other machines.