windows-server
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONPERSISTENCE
Full Analysis
- [CREDENTIALS_UNSAFE]: The script examples include hardcoded literal strings for passwords (e.g., 'P@ssw0rd!', 'TempP@ss1') within the Active Directory configuration commands. Although these function as generic dummy examples, using cleartext password literals in scripts violates standard secret-management best practices.
- [EXTERNAL_DOWNLOADS]: The skill utilizes
Install-Moduleto download and install the third-partyPSWindowsUpdatemodule from the public PowerShell Gallery to automate patching. - [PRIVILEGE_ESCALATION]: The administrative scripts configure Windows Scheduled Tasks to execute with elevated rights under the
SYSTEMaccount and at theHighestrun level for update and maintenance automation. - [PERSISTENCE]: The skill registers persistent Scheduled Tasks (
Register-ScheduledTask) to execute maintenance scripts and update processes automatically at recurring intervals.
Audit Metadata