wsl2-browser-setup
Warn
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: MEDIUMPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONPERSISTENCEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill requests high-level permissions to perform system configuration tasks.
scripts/setup-native-wsl-chrome.shusessudoto update package lists and install software.scripts/invoke-portproxy-admin.ps1uses the PowerShell-Verb RunAscommand to trigger a Windows User Account Control (UAC) prompt for administrative access.- [COMMAND_EXECUTION]: The skill executes multiple scripts to modify system state.
scripts/ensure-portproxy.ps1usesnetshto manipulate Windows port forwarding (portproxy) and add new rules to the Windows Advanced Firewall.- [PERSISTENCE]: The skill makes permanent changes to the host environment.
scripts/ensure-wslconfig.ps1writes to the.wslconfigfile in the Windows user profile, modifying the global networking mode for all WSL2 distributions.- [EXTERNAL_DOWNLOADS]: The skill fetches software from an external source.
scripts/setup-native-wsl-chrome.shdownloads the official Google Chrome installer fromhttps://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb.- [INDIRECT_PROMPT_INJECTION]: The skill contains an attack surface for processing untrusted data.
- Ingestion points: The
START_URLparameter inscripts/setup-windows-host-browser-bridge.sh(passed through tolaunch-host-browser.ps1) allows user-supplied data to influence command arguments. - Boundary markers: None observed in the command interpolation.
- Capability inventory: Includes shell execution (bash/PowerShell), system configuration modification, and network access.
- Sanitization: Relies on PowerShell's process argument handling for the URL string.
Audit Metadata