update-windows

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes various PowerShell commands and scripts to manage system updates. These include using winget for application management and the PSWindowsUpdate module for Windows Update patches.
  • The scripts scripts/winget-upgrade-all.ps1 and scripts/windows-update.ps1 perform self-elevation using Start-Process -Verb RunAs with a hidden window style. This is a standard pattern for administrative tasks intended to reduce the number of User Account Control (UAC) prompts for the user.
  • The skill includes safety mechanisms to identify processes hosting the current agent session (e.g., terminal or IDE) and pins them to prevent the session from being killed during an update.
  • Remote content is limited to the installation of the PSWindowsUpdate module from the official PowerShell Gallery (PSGallery), which is a trusted source for Windows administration tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 11:32 AM