persistence-linux SKILL.md skillA
persistence-linux from cha0upup/leoai is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add cha0upup/leoai/persistence-linux@git:20261001.e4dd21aPins git:20261001.e4dd21a in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- cha0upup/leoai
- Path
ai/src/main/resources/skills/agent-node/persistence-linux/SKILL.md- Versions recorded
- 1
- Latest version
- git:20261001.e4dd21a, committed Oct 1, 2026
- Size
- 6,134 bytes
- Repository stars
- 331
- License
- GPL-3.0
在管理员显式启用、演练 ROE 允许且用户精确授权后，为 Linux Agent 目标部署一项与红队任务匹配、可验证、限时且可完整回滚的持久化机制。当需要在既定存续窗口内维持对指定账号或主机的访问，并已提供载荷、路径和清理要求时使用。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Linux 红队持久化 此 skill 默认禁用。启用只表示能力可见，不代表本次演练授权。每次写入必须绑定精确目标、机制、载荷、存续窗口和回滚动作确认。 ## 行动目标 - 在 ROE 允许的时间窗口内维持对指定主机或账号的访问。 - 选择能满足目标的最小机制，不追求隐蔽性而增加复杂度。 - 记录变更前值、本次唯一标识、验证结果、到期时间和清理责任。 - 演练目标完成或窗口到期时可靠回滚。 ## 必要输入 - 演练目标、授权主机、目标账号和当前权限。 - 允许的机制：SSH 公钥、用户 crontab 或 systemd 服务。 - 用户提供并批准的精确公钥或命令载荷。 - 写入路径、服务名或唯一任务标识。 - 生效时间、到期/清理时间和责任人。 - 验证方法、变更前备份方式和完整回滚命令。 任何一项缺失时停留在方案阶段，不自行生成 C2 地址、载荷或基础设施参数。 ## 授权与 ROE - 风险等级：high；访问模式：write-destructive。 - 只部署一种机制，不建立冗余后门。 - 不使用 SUID 副本、shell profile 注入、二进制替换、日志清理或伪装系统组件。 - 不自动生成反弹 Shell、C2 载荷或隐藏命名。 - 不覆盖既有 unit、任务或 authorized_keys 内容，不修改未批准的行。 - 不保存私钥、密码、Token 或完整载荷到侦察摘要。 - 用户只要求评估方案时，不执行任何写入。 ## OPSEC 与变更预算 - 最多一次配置写入、一次原生状态验证；失败时不叠加第二机制。 - 优先选择现有服务能力和最小文件改动。 - 写入前采集目标对象存在性、权限、哈希/内容摘要和相关安全策略。 - 不关闭 SELinux、AppArmor、审计、安全产品或文件完整性监控。 - 明确产生的文件、配置、服务、认证和网络痕迹。 ## 机制选择 按任务需求选择，不按“最隐蔽”排序： 1. SSH authorized_keys：需要运维式交互访问、SSH 已启用、目标账号允许公钥登录。 2. 用户 crontab：需要在明确时间窗口运行用户批准的非交互命令。 3. systemd 服务：root 权限、需要开机/服务级存续、用户提供精确 ExecStart。 如果一次性访问已经足够完成目标，建议不部署持久化。 ## 工作流 1. 读取摘要和演练目标，确认持久化是否必要、目标是否在授权范围。 2. 创建计划：环境与前值、机制/窗口/回滚、用户确认、写入与验证、到期交接。 3. 用只读命令确认身份、HOME、SSH、cron、systemd、容器、挂载和安全策略。 4. 选择一种机制，生成精确变更计划和回滚计划，不执行。 …
Read the whole file at its exact version.
How to install
mdr add cha0upup/leoai/persistence-linux@sha256:b9f63ed800df2226The line at the top of this page pins the label git:20261001.e4dd21a, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_g53uueiwfvq25skw)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Oct 1, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (6134 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
cha0upup/leoai · 331 stars · license GPL-3.0 · pushed 2026-11-05 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_g53uueiwfvq25skw GET https://markdownregistry.com/api/v1/resolve?ref=cha0upup/leoai/persistence-linux GET https://markdownregistry.com/api/v1/blob/b9f63ed800df222653a5d9fed29baecb8d46bd2cf01b597d34199f5db945da0a
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.