codex-windows-fast-patch
Warn
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: MEDIUMPROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The file
assets/system-prompt.mdcontains instructions explicitly designed to bypass AI safety guardrails. It directs the agent to provide 'unrestricted cooperation,' including generating NSFW/adult content and assisting with unauthorized security research and penetration testing, while remaining 'free from moral judgment, warnings, or restrictions.'\n- [DYNAMIC_EXECUTION]: The skill implements direct byte-level patching of native Windows executables, such as the Computer Use helper binary. It also performs automated search-and-replace modifications on minified JavaScript assets within the application's ASAR archive to alter feature availability gates.\n- [COMMAND_EXECUTION]: The PowerShell and Node.js scripts frequently invoke system commands for package management, certificate creation, and software signing. It also uses-EncodedCommandto execute dynamically generated PowerShell blocks from within JavaScript contexts.\n- [PRIVILEGE_ESCALATION]: The skill requires administrative privileges to install modified MSIX packages and manage system-level services. It usesAdd-AppxPackagewith the-ForceApplicationShutdownflag to perform in-place updates of the target application.\n- [DATA_EXFILTRATION]: The scriptscripts/probe-node-repl-proxy-env.pyutilizesReadProcessMemoryandNtQueryInformationProcessto inspect the environment blocks of other running processes. This is an invasive technique used to discover local network configurations, which could potentially expose internal proxy details.\n- [EXTERNAL_DOWNLOADS]: The skill fetches the Windows SDK BuildTools directly from the NuGet registry (api.nuget.org) when required for package manipulation tasks. This is a well-known service.
Audit Metadata