The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/启动所有账号.ps1 executes another PowerShell script using the -ExecutionPolicy Bypass flag. While common for local automation, this bypasses security restrictions intended to prevent unauthorized script execution.
Evidence found in scripts/启动所有账号.ps1: & powershell -ExecutionPolicy Bypass -File $LaunchScript -AccountName $_.Script | Out-Null.
[PRIVILEGE_ESCAlATION]: The script scripts/claim_points.ps1 utilizes UIAutomationClient and UIAutomationTypes to interact with application windows. This involves using AppActivate to bring processes to the foreground and potentially simulating user input. While used here for a benign purpose (claiming points), UI automation capabilities can be leveraged to perform unauthorized actions on behalf of the user if malicious instructions are introduced.
Evidence found in scripts/claim_points.ps1: Add-Type -AssemblyName UIAutomationClient, Add-Type -AssemblyName UIAutomationTypes, and [Microsoft.VisualBasic.Interaction]::AppActivate($proc.Id).
[COMMAND_EXECUTION]: The skill relies on Start-Process to launch executables from hardcoded paths on the filesystem (C:\Program Files\WorkBuddy\WorkBuddy.exe). This assumes the application is installed in a specific location and grants the skill the ability to launch arbitrary processes if the path were manipulated or if the skill was modified to target different binaries.

workbuddy-multi-account