windbg-user-heap-corruption-investigation
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- System Configuration Tooling: The skill utilizes
gflags, a Windows utility for controlling system-wide and per-image diagnostic flags. This is standard for heap corruption analysis. The instructions include a prompt to obtain user approval before enabling features like Page Heap, which aligns with safe operational practices. - Data Ingestion and Analysis: The skill processes output from debugger commands (e.g.,
.exr,!analyze,!heap). While this represents a data ingestion surface where external content enters the agent's context, it is used for diagnostic reasoning within the debugger environment. The skill does not perform automated actions based on this content that would lead to unauthorized state changes. - External Resource References: The skill provides links to official Microsoft documentation and a GitHub feedback repository managed by the vendor. These references are used to provide additional context and a channel for reporting issues, which is a common and expected practice for technical tooling.
Audit Metadata