wsl2-browser-setup

Warn

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: MEDIUMPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONPERSISTENCEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [PRIVILEGE_ESCALATION]: The skill requests high-level permissions to perform system configuration tasks.
  • scripts/setup-native-wsl-chrome.sh uses sudo to update package lists and install software.
  • scripts/invoke-portproxy-admin.ps1 uses the PowerShell -Verb RunAs command to trigger a Windows User Account Control (UAC) prompt for administrative access.
  • [COMMAND_EXECUTION]: The skill executes multiple scripts to modify system state.
  • scripts/ensure-portproxy.ps1 uses netsh to manipulate Windows port forwarding (portproxy) and add new rules to the Windows Advanced Firewall.
  • [PERSISTENCE]: The skill makes permanent changes to the host environment.
  • scripts/ensure-wslconfig.ps1 writes to the .wslconfig file in the Windows user profile, modifying the global networking mode for all WSL2 distributions.
  • [EXTERNAL_DOWNLOADS]: The skill fetches software from an external source.
  • scripts/setup-native-wsl-chrome.sh downloads the official Google Chrome installer from https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb.
  • [INDIRECT_PROMPT_INJECTION]: The skill contains an attack surface for processing untrusted data.
  • Ingestion points: The START_URL parameter in scripts/setup-windows-host-browser-bridge.sh (passed through to launch-host-browser.ps1) allows user-supplied data to influence command arguments.
  • Boundary markers: None observed in the command interpolation.
  • Capability inventory: Includes shell execution (bash/PowerShell), system configuration modification, and network access.
  • Sanitization: Relies on PowerShell's process argument handling for the URL string.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 30, 2026, 05:16 PM