process-compose-ops
Warn
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: MEDIUMPERSISTENCEPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONMETADATA_POISONING
Full Analysis
- [PERSISTENCE]: The skill facilitates the registration of a boot-time startup task via Windows Task Scheduler to ensure services persist across system reboots.
- [PRIVILEGE_ESCALATION]: The skill includes templates to register Scheduled Tasks with administrative privileges (RunLevel Highest) for service management.
- [EXTERNAL_DOWNLOADS]: Fetches the Process Compose binary from the official GitHub repository. The implementation includes SHA-256 integrity verification.
- [REMOTE_CODE_EXECUTION]: Automates the download and execution of the Process Compose binary from GitHub releases using the install-process-compose.ps1 script.
- [COMMAND_EXECUTION]: The skill is designed to spawn and manage arbitrary local system processes through CLI commands.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from process logs (ingestion points: logs/ files; boundary markers: none; capability inventory: Read Write Bash Edit; sanitization: none).
- [METADATA_POISONING]: The author field in the skill metadata (claude-mods) is inconsistent with the provided vendor identification (0xdarkmatter).
Audit Metadata