windows-ops
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill is designed as a diagnostic toolkit for Windows workstations. Its primary operations involve reading system event logs, querying storage reliability counters, and auditing startup mechanisms to identify performance bottlenecks and hardware failures.
- [COMMAND_EXECUTION]: Several scripts execute standard Windows utilities to perform their tasks. For example,
recover-clone.ps1utilizesrobocopy.exefor high-reliability data migration, andsafe-disable-startup.ps1modifies theStartupApprovedregistry key to manage auto-launch entries. These executions are scoped to the skill's stated purpose. - [INDIRECT_PROMPT_INJECTION]: The skill ingests potentially untrusted data from system event logs (e.g.,
Get-WinEvent) and file system metadata. While this represents an attack surface for indirect prompt injection, the scripts include sanitization measures such asFormat-EventMessageto truncate and clean whitespace, and the data is used for informational display rather than being re-executed by the agent. Severity: SAFE. - [REMOTE_CODE_EXECUTION]: The
references/remote-diagnostics.mdfile provides patterns for remote administration using PowerShell Remoting (Invoke-Command,New-PSSession). These are standard administrative capabilities intended for cross-machine diagnostics and are explicitly documented as a core feature of the skill.
Audit Metadata