storage-management
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of
powershell.exe -Commandand WSL2 shell commands to perform disk operations likeRemove-Itemfor file deletion,wsl --unregisterfor system migration, andOptimize-VHDfor disk compaction.- [DATA_EXFILTRATION]: Facilitates the movement of sensitive local files, such as SSH keys, GPG keys, and.envconfiguration files, to external cloud storage providers using thercloneutility.- [EXTERNAL_DOWNLOADS]: Recommends and executes the installation of third-party tools likenpkill,dust,gdu, andrcloneusingaptandnpxpackage managers during runtime operations.- [COMMAND_EXECUTION]: Shell scripts provided for maintenance tasks (e.g., thefindloop for Git garbage collection) process directory names without proper quoting or sanitization, creating a potential command injection surface if file paths contain shell metacharacters.- [DATA_EXFILTRATION]: Accesses and processes sensitive directories including~/.ssh/and.env.exampleas part of its backup prioritization tiers.- [COMMAND_EXECUTION]: Category 8 Evidence Chain: 1. Ingestion points: Local file system directory names and paths (SKILL.md). 2. Boundary markers: Absent; the skill does not instruct the agent to ignore instructions embedded in data. 3. Capability inventory:Remove-Item,git gc,rclone,powershell.exeexecution (SKILL.md). 4. Sanitization: Absent; shell variables in maintenance loops are not escaped or quoted to prevent injection.
Audit Metadata