autohotkey-v2
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides command-line examples for running AutoHotkey scripts and using the Ahk2Exe compiler, which are standard operations for the described purpose.\n- [DYNAMIC_EXECUTION]: Scripts use Win32 DllCall and SendMessage to interact with the Windows API and ComObject for COM automation, which are native features of AutoHotkey for system integration.\n- [INDIRECT_PROMPT_INJECTION]: The lint_ahk.py script in gemini.md creates an attack surface for indirect prompt injection.\n
- Ingestion points: Reads file content from user-provided paths in lint_ahk.py.\n
- Boundary markers: No delimiters or ignore instructions are used.\n
- Capability inventory: No subprocess calls, network operations, or file system modifications are performed; capabilities are limited to console output.\n
- Sanitization: No sanitization is implemented, though input is only processed via regular expressions and not executed.
Audit Metadata