windows-ops

Pass

Audited by Gen Agent Trust Hub on Aug 15, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [SAFE]: The skill is designed as a diagnostic toolkit for Windows workstations. Its primary operations involve reading system event logs, querying storage reliability counters, and auditing startup mechanisms to identify performance bottlenecks and hardware failures.
  • [COMMAND_EXECUTION]: Several scripts execute standard Windows utilities to perform their tasks. For example, recover-clone.ps1 utilizes robocopy.exe for high-reliability data migration, and safe-disable-startup.ps1 modifies the StartupApproved registry key to manage auto-launch entries. These executions are scoped to the skill's stated purpose.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests potentially untrusted data from system event logs (e.g., Get-WinEvent) and file system metadata. While this represents an attack surface for indirect prompt injection, the scripts include sanitization measures such as Format-EventMessage to truncate and clean whitespace, and the data is used for informational display rather than being re-executed by the agent. Severity: SAFE.
  • [REMOTE_CODE_EXECUTION]: The references/remote-diagnostics.md file provides patterns for remote administration using PowerShell Remoting (Invoke-Command, New-PSSession). These are standard administrative capabilities intended for cross-machine diagnostics and are explicitly documented as a core feature of the skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 15, 2026, 09:42 PM
Security Audit — agent-trust-hub — windows-ops