skills/mukul975/anthropic-cybersecurity-skills/analyzing-prefetch-files-for-execution-history/Gen Agent Trust Hub
analyzing-prefetch-files-for-execution-history
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/agent.pyfile defines a functionrun_pecmdthat utilizessubprocess.runto execute the external forensic utilityPECmd.exe. This is a standard automation pattern for digital forensics to process artifacts using specialized third-party parsers. - [EXTERNAL_DOWNLOADS]: The
SKILL.mdfile contains instructions to install theprefetchandlznt1Python packages viapip. These are well-known libraries for parsing and decompressing Windows forensic artifacts.
Audit Metadata