powershell-module-architect

Pass

Audited by Gen Agent Trust Hub on Apr 21, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The TypeScript wrapper module_architect_wrapper.ts spawns PowerShell processes (pwsh) to run the skill's local automation scripts. This is a standard integration pattern for providing a programmatic interface to PowerShell-based tooling.
  • Evidence: The executePowerShell method in module_architect_wrapper.ts uses child_process.spawn to call pwsh with arguments passed from the wrapper methods.
  • [SAFE]: The manifest generation script create_manifest.ps1 uses Import-PowerShellDataFile to read existing manifests. This is a secure method that parses the data without executing any code contained in the file.
  • [SAFE]: The scaffolding and validation scripts implement strict parameter validation using ValidateNotNullOrEmpty, ValidatePattern, and ValidateScript to ensure that only expected input is processed.
  • [SAFE]: All instructional content in SKILL.md, EXAMPLES.md, and REFERENCE.md is focused on PowerShell architecture, profile optimization, and module design. No malicious patterns such as prompt injection, credential harvesting, or unauthorized data exfiltration were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 21, 2026, 08:31 AM
Security Audit — agent-trust-hub — powershell-module-architect