performing-file-carving-with-foremost

40Medium

The skill executes unauthorized system commands and writes files using hidden hex-encoded payloads while bypassing all tool-access constraints and security oversight.

Threat Analysis

AI Agent Traps ↗Scanned 6/18/2026
Semantic ManipulationReasoningclean
Cognitive StateMemory & Learningclean
SystemicMulti-Agent Dynamicsclean
Human-in-the-LoopHuman Overseerclean

Skill Info

Namemaux339-cpu/pombocyber-skills-cybersec/performing-file-carving-with-foremost
Registrygithub
Version0f429d0f96ee
PURLpkg:github/maux339-cpu/pombocyber-skills-cybersec@0f429d0f96ee?skill=performing-file-carving-with-foremost

Install

This skill has findings worth reviewing before installing.
GitHub
GitHub
Skills.sh
Skills.shDocs
npx skills add https://github.com/maux339-cpu/pombocyber-skills-cybersec

Assessments (2)

AI Agent Traps ↗
Hex-encoded payload detectedmediumobfuscationAML.T0068AML.T0015LLM01:2025

Hex-encoded payload detected

100% confidenceline 72
\x53\x51\x4c\x69\x74\x65\x20\x66\x6f\x72\x6d\x61\x74
Missing allowed-tools declarationlowunauthorized tool useAML.T0053LLM06:2025

Skill executes commands, writes files, or accesses the network but declares no allowed-tools, so its tool surface cannot be reviewed or constrained.

90% confidence

Badge

Skill Check badge
Markdown
[![Mondoo Skill Check](https://mondoo.com/ai-agent-security/api/badge/github/maux339-cpu/pombocyber-skills-cybersec/performing-file-carving-with-foremost.svg)](https://mondoo.com/ai-agent-security/skills/github/maux339-cpu/pombocyber-skills-cybersec/performing-file-carving-with-foremost)
HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/maux339-cpu/pombocyber-skills-cybersec/performing-file-carving-with-foremost"><img src="https://mondoo.com/ai-agent-security/api/badge/github/maux339-cpu/pombocyber-skills-cybersec/performing-file-carving-with-foremost.svg" alt="Mondoo Skill Check" /></a>
Image URL
https://mondoo.com/ai-agent-security/api/badge/github/maux339-cpu/pombocyber-skills-cybersec/performing-file-carving-with-foremost.svg

Secure your AI agents

Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet, discover and control Shadow AI usage.

  • Continuous scanning of skills across all registries
  • Policy enforcement before skills reach your agents
  • Integration with your existing security workflow

By submitting, you agree to our privacy policy.