pywinrm
Fail
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: HIGHCREDENTIALS_UNSAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [CREDENTIALS_UNSAFE]: Hardcoded plaintext credentials for remote Windows servers are present in the skill documentation.
SKILL.mdandREADME.mdlist host IP addresses (44.197.31.152,52.3.242.251,80.248.0.66) along with sensitive administrative passwords for 'Administrator' and 'superagent' accounts.- [COMMAND_EXECUTION]: The skill is designed to facilitate remote command execution (PowerShell and CMD) on Windows servers using the WinRM protocol.
- Capabilities include service management, process manipulation, registry modification, and Active Directory administration.
- While this is the intended purpose, the inclusion of live credentials for public IP addresses makes this functionality extremely high-risk.
- [EXTERNAL_DOWNLOADS]: The skill attempts to dynamically install Python dependencies if they are not present in the environment.
- Evidence in
examples/server_monitor.pyshows the script usingsubprocess.check_callto runpip install pywinrmif the module fails to import.
Recommendations
- AI detected serious security threats
Audit Metadata