debugview
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Binary Integrity Verification: The skill utilizes a detection script (
scripts/detect-dbgview.ps1) that performs a signature check usingGet-AuthenticodeSignature. This ensures that only binaries officially signed by Microsoft Corporation are executed, protecting against unauthorized or modified tools. - Privilege Management: The instructions and scripts clearly distinguish between standard operations and those requiring elevated privileges. Administrative access is only requested for kernel-mode and boot-time logging, which is the expected security model for Windows system-level diagnostics.
- Diagnostic Persistence: The boot logging feature (
scripts/boot-logging-workflow.ps1) configures a kernel driver to start during the system boot process. This is a legitimate persistence pattern used to diagnose issues that occur before the user logs in. - Network Connectivity: The skill supports remote monitoring functionality, allowing connections to remote debug agents over TCP. While this involves network operations, the documentation provides appropriate context regarding the unencrypted nature of the protocol and recommends secure environments.
- Indirect Prompt Injection Consideration: As a logging tool, this skill processes debug strings from other applications. Because these strings are untrusted data, the skill provides structured output formats (CSV, XML) to help separate metadata from the message content, which is a recommended practice for preventing data-driven instruction confusion.
Audit Metadata