40Medium
The skill executes arbitrary commands and writes files while obfuscating its intent through hex-encoded payloads, bypassing security constraints by failing to declare its required tool permissions.
Skill Info
Namecostrict-plugins-repo/mukul975-anthropic-cybersecurity-skills-cybersecurity-skills/performing-file-carving-with-foremost
Registrygithub
Versionec34f6e996f2
PURLpkg:github/costrict-plugins-repo/mukul975-anthropic-cybersecurity-skills-cybersecurity-skills@ec34f6e996f2?skill=performing-file-carving-with-foremost
Stars17
Source
Install
This skill has findings worth reviewing before installing.
GitHub
Skills.shDocs
npx skills add https://github.com/costrict-plugins-repo/mukul975-anthropic-cybersecurity-skills-cybersecurity-skillsAssessments (2)
AI Agent Traps ↗Hex-encoded payload detectedmediumobfuscationAML.T0068AML.T0015LLM01:2025
Hex-encoded payload detected
100% confidenceline 78
\x53\x51\x4c\x69\x74\x65\x20\x66\x6f\x72\x6d\x61\x74
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/costrict-plugins-repo/mukul975-anthropic-cybersecurity-skills-cybersecurity-skills/performing-file-carving-with-foremost)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/costrict-plugins-repo/mukul975-anthropic-cybersecurity-skills-cybersecurity-skills/performing-file-carving-with-foremost"><img src="https://mondoo.com/ai-agent-security/api/badge/github/costrict-plugins-repo/mukul975-anthropic-cybersecurity-skills-cybersecurity-skills/performing-file-carving-with-foremost.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/costrict-plugins-repo/mukul975-anthropic-cybersecurity-skills-cybersecurity-skills/performing-file-carving-with-foremost.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow