process-compose-ops
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads the Process Compose binary from the project's official GitHub Release page. The skill mandates SHA-256 checksum verification before extraction or execution, ensuring binary integrity and protecting against tampered downloads.
- [PERSISTENCE_MECHANISMS]: Includes templates to register Windows Scheduled Tasks that launch the orchestration stack at boot. This is implemented using the S4U logon type to ensure services run without stored passwords or interactive logon, following security best practices for local persistence.
- [PRIVILEGE_ESCALATION]: The task installation scripts require Administrator privileges to modify system-level tasks and environment paths. This requirement is explicitly documented and enforced via script-level checks.
- [COMMAND_EXECUTION]: Executes user-defined commands to manage service lifecycles. The skill instructs users to unset sensitive environment variables and source credentials from gitignored files to prevent accidental data exposure.
Audit Metadata