windows-macos-input-setup

Pass

Audited by Gen Agent Trust Hub on Sep 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructions include PowerShell commands to modify user-level registry keys (HKCU:\Software\Microsoft\Narrator\NoRoam) to disable specific shortcut launchers and use Get-Process and Get-CimInstance to verify the state of the PowerToys background engine.
  • [PERSISTENCE]: The skill requires the agent to ensure Microsoft PowerToys is configured to start automatically at logon by verifying the startup flag is set to true within the application settings file.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a verification workflow that involves reading text from the Notepad application via accessibility APIs to confirm the success of keyboard remaps.
  • Ingestion points: Notepad accessibility text as described in references/setup-and-validation.md.
  • Boundary markers: The agent is instructed to use a unique sentinel string (FINAL_GLOBAL_REMAP_PROOF) to validate correct input processing.
  • Capability inventory: Registry modification (New-ItemProperty), local application data file writes, and process inspection capabilities.
  • Sanitization: The skill relies on an exact sentinel match for validation; no explicit escaping of other captured accessibility text is defined.
  • [EXTERNAL_DOWNLOADS]: The skill references official Microsoft documentation and public GitHub repositories for PowerToys (e.g., learn.microsoft.com and github.com/microsoft/PowerToys), which are well-known and trusted sources.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 10, 2026, 08:55 AM