{"slug":"zero-lab-ai-rootkit-triage","source_name":"zero-lab-ai/rootkit-triage","name":"Zero Lab AI/Rootkit Triage","description":"Triages suspected rootkits, bootkits, hidden processes, kernel hooks, driver or module anomalies, concealed network activity, eBPF implants, and boot-integrity failures. Use when host tools may be lying and the incident needs evidence-preserving cross-view analysis, containment, or forensic handoff.","version":1,"lift":{"pass_rate_delta_pts":18.18,"pass_rate_pct":95.5,"total_cases":22,"passed_cases":21,"tokens_delta_pct":92.1,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.8-flash","grading_method":"judged","completed_at":"2026-11-03T04:29:10.484261+00:00"},"skill_score":0.9545,"benchmark_models":[{"model":"gemini-3.8-flash","headline":true,"delta_pts":18.18,"with_pass_pct":95.5,"without_pass_pct":77.3,"tokens_delta_pct":92.1,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":22,"verdict":"mixed","never_hurt":true,"completed_at":"2026-11-03T04:29:10.484261+00:00","run_id":"e22772ce-e475-4ad2-b9de-482a7893b116","latest_attempt":{"id":"e22772ce-e475-4ad2-b9de-482a7893b116","runner_model":"gemini-3.8-flash","overall_verdict":"mixed","completed_at":"2026-11-03T04:29:10.484261+00:00","gate":null},"version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"Apache-2.0","install_count":0,"total_uses":0,"total_users":0,"manifest_hash":"0fea4b4ab09286ccfbca64a6f987f9a3aca061d971464aefe8444ba253864764","install_name":"zero-lab-ai-rootkit-triage","version_id":"45cf3834-80c3-4d3f-b64d-29f9474171ef","body_sha256":"0fea4b4ab09286ccfbca64a6f987f9a3aca061d971464aefe8444ba253864764","render_hash":"850942bf1cf26a200a7eddebbcf293ec29177d8307efed007ee685dae897c0fb","raw_url":"https://app.decimal.ai/s/zero-lab-ai-rootkit-triage/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/zero-lab-ai-rootkit-triage"}