analyzing-bootkit-and-rootkit-samples

40Medium

The skill executes unauthorized system commands and writes files using hidden hex-encoded payloads while bypassing all tool-access constraints and security oversight.

Threat Analysis

AI Agent Traps ↗Scanned 6/18/2026
Semantic ManipulationReasoningclean
Cognitive StateMemory & Learningclean
SystemicMulti-Agent Dynamicsclean
Human-in-the-LoopHuman Overseerclean

Skill Info

Namemukul975/Anthropic-Cybersecurity-Skills/analyzing-bootkit-and-rootkit-samples
Registrygithub
Version04450304b126
PURLpkg:github/mukul975/Anthropic-Cybersecurity-Skills@04450304b126?skill=analyzing-bootkit-and-rootkit-samples
Stars16,832

Install

This skill has findings worth reviewing before installing.
GitHub
GitHub
Claude Code
Claude CodeDocs
/plugin marketplace add mukul975/Anthropic-Cybersecurity-Skills
/plugin install analyzing-bootkit-and-rootkit-samples@mukul975/Anthropic-Cybersecurity-Skills
Skills.sh
Skills.shDocs
npx skills add https://github.com/mukul975/Anthropic-Cybersecurity-Skills

Assessments (2)

AI Agent Traps ↗
Hex-encoded payload detectedmediumobfuscationAML.T0068AML.T0015LLM01:2025

Hex-encoded payload detected

100% confidenceline 113
\xFA\x33\xC0\x8E\xD0\xBC\x00\x7C\x8B\xF4\x50\x07
Missing allowed-tools declarationlowunauthorized tool useAML.T0053LLM06:2025

Skill executes commands, writes files, or accesses the network but declares no allowed-tools, so its tool surface cannot be reviewed or constrained.

90% confidence

Badge

Skill Check badge
Markdown
[![Mondoo Skill Check](https://mondoo.com/ai-agent-security/api/badge/github/mukul975/Anthropic-Cybersecurity-Skills/analyzing-bootkit-and-rootkit-samples.svg)](https://mondoo.com/ai-agent-security/skills/github/mukul975/Anthropic-Cybersecurity-Skills/analyzing-bootkit-and-rootkit-samples)
HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/mukul975/Anthropic-Cybersecurity-Skills/analyzing-bootkit-and-rootkit-samples"><img src="https://mondoo.com/ai-agent-security/api/badge/github/mukul975/Anthropic-Cybersecurity-Skills/analyzing-bootkit-and-rootkit-samples.svg" alt="Mondoo Skill Check" /></a>
Image URL
https://mondoo.com/ai-agent-security/api/badge/github/mukul975/Anthropic-Cybersecurity-Skills/analyzing-bootkit-and-rootkit-samples.svg

Secure your AI agents

Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet, discover and control Shadow AI usage.

  • Continuous scanning of skills across all registries
  • Policy enforcement before skills reach your agents
  • Integration with your existing security workflow

By submitting, you agree to our privacy policy.