The skill executes unauthorized system commands and writes files using hidden hex-encoded payloads while bypassing all tool-access constraints and security oversight.
Hex-encoded payload detected
\xFA\x33\xC0\x8E\xD0\xBC\x00\x7C\x8B\xF4\x50\x07
[](https://mondoo.com/ai-agent-security/skills/github/mukul975/Anthropic-Cybersecurity-Skills/analyzing-bootkit-and-rootkit-samples)<a href="https://mondoo.com/ai-agent-security/skills/github/mukul975/Anthropic-Cybersecurity-Skills/analyzing-bootkit-and-rootkit-samples"><img src="https://mondoo.com/ai-agent-security/api/badge/github/mukul975/Anthropic-Cybersecurity-Skills/analyzing-bootkit-and-rootkit-samples.svg" alt="Mondoo Skill Check" /></a>https://mondoo.com/ai-agent-security/api/badge/github/mukul975/Anthropic-Cybersecurity-Skills/analyzing-bootkit-and-rootkit-samples.svgSkills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.