windows-c-drive-cleanup
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/Quarantine-OrphanMsp.ps1uses the system utilitiestakeown.exeandicacls.exeto modify ownership and permissions of files within theC:\Windows\Installerdirectory. This capability is used to enable the removal of orphaned patch files that are otherwise protected by system permissions. - [COMMAND_EXECUTION]: The script
scripts/Analyze-CDrive.ps1performs recursive directory scans across the system drive and user profile directories (includingAppDataandProgramData) to aggregate file size information for cleanup analysis.
Audit Metadata