powershell-7-expert
Warn
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDATA_EXFILTRATIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script 'crossplatform_automation.ps1' modifies shell startup files ('
/.bashrc', '/.zshrc') to persist environment variables, which is a persistence mechanism. - [COMMAND_EXECUTION]: The 'ps7_wrapper.ts' module spawns 'pwsh' processes with dynamically built arguments, and 'crossplatform_automation.ps1' executes 'docker' commands.
- [DATA_EXFILTRATION]: The 'Backup' action in 'crossplatform_automation.ps1' reads and compresses the entire '$HOME/Documents' directory into a zip file, accessing potentially sensitive user data.
- [REMOTE_CODE_EXECUTION]: The skill fetches data from remote API endpoints via 'Invoke-RestMethod' and supports installing external modules from the PowerShell Gallery.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface. Ingestion points: 'ApiEndpoint' and 'ConfigurationData' in 'crossplatform_automation.ps1'. Boundary markers: Absent. Capability inventory: Shell execution ('spawn'), 'docker' operations, file write ('Add-Content'), and network requests ('Invoke-RestMethod'). Sanitization: Validation is limited to 'ValidateSet' on platform parameters, and no sanitization is performed on data retrieved from external APIs before it is used to modify system configuration.
Audit Metadata