The Agent Skills Directory

[COMMAND_EXECUTION]: The script apply-cleanup-selection.py executes PowerShell commands to perform disk cleanup and system optimization. This functionality is protected by a sophisticated validator that canonicalizes paths, enforces a longest-prefix-wins allow/deny list (protecting sensitive system directories), and rejects shell metacharacters to prevent command injection.
[EXTERNAL_DOWNLOADS]: The Install-WinHealthCheck.ps1 script installs the BurntToast PowerShell module from the official PowerShell Gallery to enable desktop notifications. This is a standard practice for creating Windows toast notifications.
[DATA_EXFILTRATION]: The monitoring script win-health-check.ps1 supports sending health alerts to ntfy.sh, a well-known third-party notification service. This is an optional, user-configured feature for remote alerting and does not transmit sensitive file contents.
[COMMAND_EXECUTION]: The Audit-WinHealth.ps1 script executes various administrative commands (e.g., dism, vssadmin, pnputil) to collect system health data. These are read-only operations used for diagnostic purposes.
[REMOTE_CODE_EXECUTION]: The render-cleanup-plan.py script initiates a local HTTP server on 127.0.0.1 to provide an interactive selection UI. It uses os.system on macOS or webbrowser.open on other platforms to launch the local browser, which is a standard method for providing interactive tooling in an agent context.

maintaining-windows-health