powershell-7-expert
Warn
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: MEDIUMPERSISTENCECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PERSISTENCE]: The skill modifies user shell configuration files (~/.bashrc and ~/.zshrc) to store environment variables, ensuring they persist across future terminal sessions. Evidence found in scripts/crossplatform_automation.ps1 (lines 270-282).
- [COMMAND_EXECUTION]: The TypeScript wrapper scripts/ps7_wrapper.ts programmatically executes the pwsh binary with arguments derived from external parameters (lines 97-154).
- [DATA_EXFILTRATION]: The skill has the capability to send data to external URLs via Invoke-RestMethod and other network operations in scripts/rest_api_consumer.ps1 and scripts/crossplatform_automation.ps1.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from API responses and configuration parameters that influence subsequent operations like Docker commands or file modifications. Ingestion points include ApiEndpoint and API responses in scripts/crossplatform_automation.ps1. Capability inventory includes Docker execution, file writes, and network requests. No boundary markers or sanitization were identified.
- [EXTERNAL_DOWNLOADS]: The documentation suggests downloading and installing PowerShell and related tools from external sources, including GitHub and Microsoft domains. Evidence in references/ps7_quickstart.md (lines 21-27).
Audit Metadata