busybox-on-windows
Fail
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads binary executables (.exe) from an external source at
https://frippery.org/files/busybox/. - Target files include
busybox.exe,busybox64.exe,busybox64u.exe, andbusybox64a.exe. - [COMMAND_EXECUTION]: The skill executes PowerShell commands to perform system reconnaissance on the host machine.
- It queries CPU specifications using
Get-CimInstance. - It reads OS version information from the Windows Registry at
HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion. - [REMOTE_CODE_EXECUTION]: The skill instructs the agent to execute the downloaded external binaries (e.g.,
busybox.exe --list) on the local system. This represents a risk as the integrity and safety of the external binary cannot be verified through static analysis.
Recommendations
- AI detected serious security threats
Audit Metadata