{"slug":"cyberstrikeus-t1056-004-credential-api-hooking","source_name":"cyberstrikeus/T1056.004_credential-api-hooking","name":"Cyberstrikeus/T1056 004 Credential API Hooking","description":"Adversaries may hook into Windows application programming interface (API) functions and Linux system functions to collect user credentials.","version":1,"lift":{"pass_rate_delta_pts":27.27,"pass_rate_pct":81.8,"total_cases":22,"passed_cases":18,"tokens_delta_pct":33.6,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-08-30T20:09:21.098974+00:00"},"skill_score":0.8182,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":27.27,"with_pass_pct":81.8,"without_pass_pct":54.5,"tokens_delta_pct":33.6,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":21,"verdict":"mixed","never_hurt":true,"completed_at":"2026-08-30T20:09:21.098974+00:00","run_id":"2f7dbd79-a74a-4c4c-984f-143d51d13cad","latest_attempt":{"id":"2f7dbd79-a74a-4c4c-984f-143d51d13cad","runner_model":"gemini-3.6-flash","overall_verdict":"mixed","completed_at":"2026-08-30T20:09:21.098974+00:00","gate":null},"version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"AGPL-3.0","install_count":0,"total_uses":0,"total_users":0,"manifest_hash":"c5fb92d8ee02183892ae8c00c5baec8b194f4dc631688fe24c27cd67900f3fe3","install_name":"cyberstrikeus-t1056-004-credential-api-hooking","version_id":"1c8975db-236b-40d5-96e0-9e07d07c1587","body_sha256":"c5fb92d8ee02183892ae8c00c5baec8b194f4dc631688fe24c27cd67900f3fe3","render_hash":"9bebde6814c9ca6e89a70dd0af492f4eb1bc3220c02420d05ad9d320d951710b","raw_url":"https://app.decimal.ai/s/cyberstrikeus-t1056-004-credential-api-hooking/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/cyberstrikeus-t1056-004-credential-api-hooking"}