Run the GauntletRun Gauntlet Menu
Run the Gauntlet

Skill scan · first seen 2026-10-19 · scanned 1 time

analyzing-macro-malware-in-office-documents · mukul975/Anthropic-Cybersecurity-Skills

Skill scan · rules 2026-10-19.3

Medium-risk pattern

Caution: 1 pattern worth a look before installing.

SeverityPatternLineWhat it says
MediumPowerShell running downloaded code FS-EXE-003
Invoke-Expression on downloaded text runs it unseen.
327IEX (New-Object Net.WebClient).DownloadString
Fingerprintf63202e005d9…

sha256:f63202e005d9b10280c6a8517a073322945a70454a617ff6ef37bcb48506e51a

Maintain this repository? Verify with GitHub to reply to these findings or report a fix. A person reviews every reply and aims to answer within 7 days.

Share

Checked a skill before my agent installed it. It has PowerShell running downloaded code, so I read those lines first: https://theagentforge.io/scan/f63202e005d9b10280c6a8517a073322945a70454a617ff6ef37bcb48506e51a?from=share

Your skill? Change it, then . The new version gets its own page.

This page shows text patterns in one exact version of the file (fingerprint above), not a judgement of its author. Publisher? Reply or dispute, and we add your reply here.

Check your own skills

Or paste this into your agent once. It then checks every skill before installing it:

Read https://theagentforge.io/skill.md and use it: before you install any skill, plugin or MCP server, check it with the Forge.

Free, no account. Read the skill file first.