b64-py
Fail
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The file SKILL.md contains Base64 encoded strings that decode to 'curl url|sh'. This pattern is a highly dangerous remote code execution vector as it downloads and executes arbitrary code directly in a shell.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute complex shell pipelines in SKILL.md that involve decoding hidden payloads and piping them directly into multiple system interpreters such as python3, node, perl, and ruby.
- [EXTERNAL_DOWNLOADS]: The obfuscated command hidden within the Base64 string in SKILL.md uses the 'curl' utility, indicating an intent to perform unauthorized external network requests and downloads.
Recommendations
- AI detected serious security threats
Audit Metadata