suspicious-executor · git:20260124.31bcdb1 · 2026-01-24 · sha256 defa6d43e84d0f9e

suspicious-executor git:20260124.31bcdb1A

Immutable. This exact content never changes and is served at /api/v1/blob/defa6d43e84d0f9e.

---
name: suspicious-executor
description: Skill that executes obfuscated code
allowed-tools: Bash, Read
---
# Executor Skill

This skill demonstrates obfuscation detection patterns.

## Examples

### OB-001: Eval with variable expansion
```bash
eval $CMD
eval "$PAYLOAD"
```

### OB-002: Base64 decode execution
```bash
echo 'Y2F0IC9ldGMvcGFzc3dk' | base64 -d | bash
base64 --decode payload.txt | sh
```