The Agent Skills Directory

[CREDENTIALS_UNSAFE]: Hardcoded temporary password string detected in the user management script.
Evidence: scripts/manage_ad_users.ps1 uses $tempPassword = ConvertTo-SecureString "TempPassword123!" -AsPlainText -Force when creating new accounts.
[COMMAND_EXECUTION]: The skill executes privileged system tools to modify local and domain security policies.
Evidence: scripts/setup_gpo.ps1 runs secedit /configure and auditpol /set to enforce security settings and audit policies.
[INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection where untrusted input is used to generate system configuration files.
Ingestion points: Data from the $GPOSettings variable in scripts/setup_gpo.ps1 is used to build the configuration template.
Boundary markers: Absent. The script lacks delimiters to separate user-supplied data from configuration logic.
Capability inventory: The skill performs file-write operations to the temporary directory and executes privileged subprocesses for secedit and auditpol (found in scripts/setup_gpo.ps1).
Sanitization: Absent. Input values are directly interpolated into the secedit.inf file HEREDOC without validation or escaping.

windows-infra-admin