windows-macos-input-setup
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions include PowerShell commands to modify user-level registry keys (
HKCU:\Software\Microsoft\Narrator\NoRoam) to disable specific shortcut launchers and useGet-ProcessandGet-CimInstanceto verify the state of the PowerToys background engine. - [PERSISTENCE]: The skill requires the agent to ensure Microsoft PowerToys is configured to start automatically at logon by verifying the
startupflag is set totruewithin the application settings file. - [INDIRECT_PROMPT_INJECTION]: The skill defines a verification workflow that involves reading text from the Notepad application via accessibility APIs to confirm the success of keyboard remaps.
- Ingestion points: Notepad accessibility text as described in
references/setup-and-validation.md. - Boundary markers: The agent is instructed to use a unique sentinel string (
FINAL_GLOBAL_REMAP_PROOF) to validate correct input processing. - Capability inventory: Registry modification (
New-ItemProperty), local application data file writes, and process inspection capabilities. - Sanitization: The skill relies on an exact sentinel match for validation; no explicit escaping of other captured accessibility text is defined.
- [EXTERNAL_DOWNLOADS]: The skill references official Microsoft documentation and public GitHub repositories for PowerToys (e.g.,
learn.microsoft.comandgithub.com/microsoft/PowerToys), which are well-known and trusted sources.
Audit Metadata