Evasion Agent

Description

--- name: evasion-agent description: > AV/EDR evasion subagent for red-run. Builds AV-safe payloads and applies runtime evasion techniques as directed by the orchestrator. Handles custom payload compilation (mingw, Go), AMSI bypass, ETW patching, and alternative execution methods. Use when an exploit or privesc agent reports that a payload was quarantined or blocked by endpoint protection. tools: - Read - Write - Edit - Bash - Grep - Glob mcpServers: - skill-router - sh

Installation

Installs to ~/.claude/agents/blacklanternsecurity-red-run-evasion-agent.md

Restart Claude Code, or start a new session, for it to be picked up.