windows-infra-admin
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEPROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes PowerShell to run system utilities such as secedit.exe, auditpol.exe, and wbadmin.exe for system configuration and backups, which is appropriate for its administrative role.
- [CREDENTIALS_UNSAFE]: The script manage_ad_users.ps1 hardcodes a default temporary password ('TempPassword123!') for new user creation; while it forces a password change at logon, this is a minor security weakness in the automation template.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface. 1. Ingestion points: Data from Active Directory and DNS records enter the context. 2. Boundary markers: Delimiters and instructions to ignore embedded commands are absent. 3. Capability inventory: The agent can modify directory objects, execute system configuration tools, and write files. 4. Sanitization: Basic format validation is present, but sanitization for instructional content is absent.
- [DATA_EXFILTRATION]: The configure_dns.ps1 script queries the well-known public DNS server 8.8.8.8 for connectivity and health verification.
Audit Metadata