analyzing-powershell-script-block-logging

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill operates entirely locally to perform forensic parsing of Windows PowerShell EVTX logs. It utilizes standard libraries (python-evtx and lxml) to read and extract log fields, reconstruct multi-part entries, and run regular expression heuristics on script text. No network communication, credential extraction, prompt injection, or malicious execution capabilities were found inside the scripts or documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 03:02 PM