Skip to content
Agentmart
Submit a tool

lolbin-audit

Audit projects, containers, sudoers/IaC, and shell-out call sites for dangerous Living-Off-the-Land binary exposure using GTFOBins data.

Skill by ain3sh

IndexedLicense unknown★ 15
Write a review

Install

Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.

npx agentmarket install skill/ain3sh-lolbin-audit

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

Audit projects, containers, sudoers/IaC, and shell-out call sites for dangerous Living-Off-the-Land binary exposure using GTFOBins data. Use when asked about GTFOBins, LOLBins, post-foothold blast radius, privilege escalation, SUID/capability risks, sudo allowlists, container hardening, or security auto-testing of Unix/Linux projects.

Use cases: testing, data, security

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this skill can do and what it asks for, from its SKILL.md and code. Checked Oct 25, 2026.

Tools
No tools found
Secrets
None asked for
Install scripts
None found
Runs as
Python package

Network hosts it talks to 1

  • codeload.github.com · found in install command

Files it touches

  • ~/.claude/skills/lolbin-audit
  • Your home directory (~)

What's inside

Skill name
lolbin-audit
Description
Audit projects, containers, sudoers/IaC, and shell-out call sites for dangerous Living-Off-the-Land binary exposure using GTFOBins data. Use when asked about GTFOBins, LOLBins, post-foothold blast radius, privilege escalation, SUID/capability risks, sudo allowlists, container hardening, or security auto-testing of Unix/Linux projects.
License
unknown
Instructions
292 lines in SKILL.md · view on GitHub

Before installing

  • Ships executable scripts

Agent Skills spec issues

  • body: contains an absolute path from the author's machine

Files (13)

  • SKILL.md
  • categories.md · references/
  • findings-template.md · references/
  • bins-with.sh · scripts/
  • explain-bin.sh · scripts/
  • gtfo-data-dir.sh · scripts/
  • has-technique.sh · scripts/
  • iac-suid-audit.sh · scripts/
  • image-audit.sh · scripts/
  • lolbin_audit.py · scripts/
  • project-audit.sh · scripts/
  • shellout-grep.sh · scripts/
  • sudoers-audit.sh · scripts/

The license isn't open source, so the instructions aren't shown here. Read SKILL.md on GitHub

More from ain3sh/.agents

Signals

Stars
15
Forks
1
Open issues
0
Last commit (this folder)
Oct 7, 2026 (22 days ago)

From GitHub (fetched Oct 24, 2026).

Details

License
License unknown
First seen
Oct 24, 2026
Last checked
Oct 24, 2026

More from ain3sh

Cite this page

lolbin-audit skill. Agent Mart. https://agentmart.dev/skills/ain3sh-lolbin-audit (last updated 2026-10-24)