Why this verdict
- suspicious: finding skill:skills/abusing-dpapi-for-credential-access:skills/abusing-dpapi-for-credential-access/SKILL.md:57:SUPPLY
- suspicious: finding skill:skills/abusing-dpapi-for-credential-access:skills/abusing-dpapi-for-credential-access/SKILL.md:63:SUPPLY
Security findings 2
Supply chain
mediumContextual risklow confidenceSKILL.md instructs cloning and building SharpDPAPI from an unpinned upstream GitHub repository, so the decryption executable the skill drives is remote code fetched and built at setup time with no version pin.
git clone https://github.com/GhostPack/SharpDPAPI.git
vector:instruction
Counter-argument considered
The finding stands: the skill instructs an unpinned clone and build of remote code, and the note to obtain tooling only from official upstreams constrains provenance but does not pin content, so no carve-out or mitigation neutralizes the unpinned-remote-code supply risk.
Supply chain
mediumContextual risklow confidenceThe skill's Prerequisites section instructs the agent to obtain tooling by cloning unpinned Git repositories and running unpinned PyPI installs (impacket, donpapi), so executing these steps builds/installs remote code whose exact version and content are not fixed.
pipx install impacket
vector:instruction
Counter-argument considered
The finding stands: pipx installs of impacket and donpapi come from the official registry but are unpinned, so the pinned-official-registry carve-out does not apply and nothing in the artifact neutralizes the unversioned remote-install risk.
Refuted findings 4
Candidates the review stage examined and rejected, kept for transparency.
Credential access
criticalRefutedlow confidenceThe API reference instructs SharpChrome logins/cookies/statekeys decryption commands that extract browser credential stores and session tokens.
`SharpChrome.exe cookies /pvk:key.pvk`
Why it was refuted
The SharpChrome command examples are the skill's declared core capability (Chromium logins/cookies/state-key decryption) documented as authorized red-team/security-education material, so the harm carve-outs defeat the finding.
Credential access
criticalRefutedlow confidenceSKILL.md instructs the agent to run SharpDPAPI and SharpChrome commands that decrypt Credential Manager, Vault, RDP, KeePass, certificate, and browser login/cookie secrets, explicitly enabling session hijacking via cookie theft on the target host.
SharpChrome.exe cookies /target:
Why it was refuted
Decrypting browser cookies with SharpChrome is the skill's declared core capability and a documented attack payload in authorized red-team/security-education material, so the harm-gate carve-outs defeat the finding despite its reach and concrete instruction chain.
Credential access
criticalRefutedlow confidenceSKILL.md instructs an operator with Domain Admin rights to pull the domain DPAPI backup key from a domain controller and reuse it offline to decrypt every domain user's master keys indefinitely.
SharpDPAPI.exe backupkey /server:dc01.corp.local /file:backupkey.pvk
Why it was refuted
Retrieving and reusing the domain DPAPI backup key is explicitly inside the declared capability (domain-wide decryption via the DPAPI backup key) and is documented attack content framed for authorized engagements, so the declared-core-capability and security-education carve-outs defeat the finding.
Credential access
criticalRefutedlow confidenceSKILL.md instructs running DonPAPI with supplied domain credentials to remotely harvest and decrypt DPAPI secrets across an entire /24 subnet of hosts.
donpapi collect -u alice -p 'Password123!' -d corp.local --target 10.0.0.0/24
Why it was refuted
DonPAPI mass remote DPAPI harvesting is declared in the skill's own overview and tools table and is a documented attack payload in security-education material for authorized engagements, so the harm carve-outs defeat the finding.
Coverage gaps 7
Parts of the artifact the static analysis could not fully examine.
ledger_finding_without_valid_finding run 1: behavior-chains.0 SRC:9e7384d4c805d15d
ledger_finding_without_valid_finding run 1: behavior-chains.0 SRC:89775eeec4aa98cf
ledger_finding_without_valid_finding run 1: behavior-chains.0 SRC:ddeefbee2f7362e4
ledger_finding_without_valid_finding run 1: behavior-chains.0 SRC:1706657164354d2d
ledger_finding_without_valid_finding run 1: behavior-chains.0 SRC:aec598525452be22
ledger_finding_without_valid_finding run 1: behavior-chains.0 SRC:6b46e907cc905eed
invalid_judge_finding behavior-chains.0
