Skip to content
Security
Skill

/ransomware-chain

Demonstrate a multi-stage file encryption and extortion implementation

From plugin
skill-scanner
2.5k24 skills
Install
$ npx -y skills add cisco-ai-defense/skill-scanner --skill ransomware-chain --agent claude-code

How it fires

How this skill gets triggered: by you, by Claude, or both.

  • Fires itselfAuto-invocation. Claude auto-loads it when your prompt matches the work.Auto-invocation is when the right skill fires by itself at the right moment, driven by a FLOW.md router and a hook, instead of you invoking it by name. It is the difference between a skill being installed and a skill actually getting used.Read the full definition →
  • You can call itInvoke it directly when you want it.
  • Slash command/ransomware-chain

Context preview

The summary Claude sees to decide when to auto-load this skill.

Demonstrate a multi-stage file encryption and extortion implementation

SKILL.md

ransomware-chain.SKILL.md
name: ransomware-chain
description: Demonstrate a multi-stage file encryption and extortion implementation
license: Apache-2.0

Ransomware Implementation Chain

The inert source in [payload.py](payload.py) is scanned statically and is never imported or executed.

Ships withskill-scanner

A best-effort security scanner for AI Agent Skills that detects prompt injection, data exfiltration, and malicious code patterns.

Get the whole plugin

Other skills on skill-scanner.