codex-windows-fast-patch

Warn

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: MEDIUMPROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
  • [PROMPT_INJECTION]: The file assets/system-prompt.md contains instructions explicitly designed to bypass AI safety guardrails. It directs the agent to provide 'unrestricted cooperation,' including generating NSFW/adult content and assisting with unauthorized security research and penetration testing, while remaining 'free from moral judgment, warnings, or restrictions.'\n- [DYNAMIC_EXECUTION]: The skill implements direct byte-level patching of native Windows executables, such as the Computer Use helper binary. It also performs automated search-and-replace modifications on minified JavaScript assets within the application's ASAR archive to alter feature availability gates.\n- [COMMAND_EXECUTION]: The PowerShell and Node.js scripts frequently invoke system commands for package management, certificate creation, and software signing. It also uses -EncodedCommand to execute dynamically generated PowerShell blocks from within JavaScript contexts.\n- [PRIVILEGE_ESCALATION]: The skill requires administrative privileges to install modified MSIX packages and manage system-level services. It uses Add-AppxPackage with the -ForceApplicationShutdown flag to perform in-place updates of the target application.\n- [DATA_EXFILTRATION]: The script scripts/probe-node-repl-proxy-env.py utilizes ReadProcessMemory and NtQueryInformationProcess to inspect the environment blocks of other running processes. This is an invasive technique used to discover local network configurations, which could potentially expose internal proxy details.\n- [EXTERNAL_DOWNLOADS]: The skill fetches the Windows SDK BuildTools directly from the NuGet registry (api.nuget.org) when required for package manipulation tasks. This is a well-known service.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 23, 2026, 12:04 AM