windbg
Pass
Audited by Gen Agent Trust Hub on Nov 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches WinDbg from the official Microsoft Store using
wingetand downloads debugging symbols from Microsoft's public symbol server. These are trusted sources for Windows diagnostics. - [COMMAND_EXECUTION]: Employs
bcdeditto enable kernel debugging and configure network debug settings, which are essential for kernel-mode analysis. - [PRIVILEGE_ESCALATION]: Recommends modifying system registry keys for crash dump handling, which requires administrative privileges but is a routine task for debugging setup.
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes potentially malicious data from crash dumps and memory. Ingestion points: Crash dump files and process memory. Boundary markers: None. Capability inventory: Boot configuration, registry modification, and memory access. Sanitization: None. This interaction with untrusted data is a known surface for indirect injection in security tools.
Audit Metadata