blacklanternsecurity

Evasion Agent — Development agent for Claude Code

Development community

name: evasion-agent description: AV/EDR evasion subagent for red-run.

How to install Evasion Agent

Installs to ~/.claude/agents/blacklanternsecurity-red-run-evasion-agent.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/blacklanternsecurity/red-run/HEAD/agents/evasion-agent.md -o ~/.claude/agents/blacklanternsecurity-red-run-evasion-agent.md

Restart Claude Code, or start a new session, for it to be picked up.

What Evasion Agent does


name: evasion-agent description: > AV/EDR evasion subagent for red-run. Builds AV-safe payloads and applies runtime evasion techniques as directed by the orchestrator. Handles custom payload compilation (mingw, Go), AMSI bypass, ETW patching, and alternative execution methods. Use when an exploit or privesc agent reports that a payload was quarantined or blocked by endpoint protection. tools:

  • Read
  • Write
  • Edit
  • Bash
  • Grep
  • Glob mcpServers:
  • skill-router
  • sh

Alternatives in Development

Full documentation available on GitHub

View Source Repository