powershell-security-hardening
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The TypeScript wrapper (‘security_hardening_wrapper.ts’) uses ‘child_process.spawn’ to execute administrative PowerShell scripts. These scripts perform system-level modifications, such as editing registry keys in ‘HKLM’, to enforce security baselines like constrained language mode and module logging. These operations are consistent with the skill’s stated purpose of security hardening.
- [COMMAND_EXECUTION]: The skill includes scripts (‘enforce_execution_policy.ps1’, ‘sign_module.ps1’) that manage critical security policies and digital signatures on the host system. While these require high privileges, they are designed as defensive tools to prevent unauthorized script execution.
- [SAFE]: The skill actively promotes security best practices, such as avoiding hardcoded credentials in scripts and using secure vaults, aligning with industry-standard security baselines like CIS/STIG.
Audit Metadata