SkillSpector · doubao-pc-optimizer

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

references/macos.md

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

references/windows-cleanup.md

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

scripts/win_game_boost.ps1

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

scripts/win_game_boost.ps1

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

scripts/win_game_boost.ps1

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

scripts/mac_clean.sh

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

scripts/mac_clean.sh

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

scripts/mac_clean.sh

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

scripts/selfcheck.sh

YARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).

references/windows-cleanup.md