kernel-exploitation

This skill is purpose-aligned but high risk because its stated purpose is offensive kernel exploitation and privilege escalation. The install source is mostly benign and official, but the skill meaningfully enables an AI agent to develop or assist real exploit chains, so it should be treated as a dangerous offensive-security capability rather than malware.

The provided file is an explicitly offensive, highly actionable Linux kernel heap exploitation playbook. It details how to manipulate SLUB allocator behavior and specific kernel objects (msg_msg, pipe_buffer, sk_buff) to achieve UAF/OOB-based primitives including arbitrary read/write and potential control-flow via function-pointer paths, and it includes race stabilization tactics. Even though there is no executable malware in this snippet, its presence in a software dependency is a serious supply-chain misuse/weaponization risk. Additional package-level behavior cannot be assessed from this fragment alone.

This fragment is not benign software logic; it is exploit-development/weaponization documentation aimed at bypassing major Linux kernel mitigations to achieve kernel code execution and privilege escalation. No actual runtime malicious behavior (I/O/exfiltration/command execution) is implemented in the fragment itself, but its distribution as part of a software dependency would represent a high supply-chain security concern due to the clear offensive intent and actionable bypass guidance.