skills/mukul975/anthropic-cybersecurity-skills/implementing-anti-ransomware-group-policy/Gen Agent Trust Hub
implementing-anti-ransomware-group-policy
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/agent.pyfile usessubprocess.runto execute hardcoded PowerShell commands for auditing system configurations. These commands query settings for AppLocker, Controlled Folder Access, and Attack Surface Reduction (ASR) rules. The execution is restricted to a fixed list of audit commands and does not incorporate untrusted input. - [DYNAMIC_EXECUTION]: The
remediatecommand inscripts/agent.pydynamically generates a PowerShell hardening script (remediate_ransomware_gpo.ps1) by comparing the local system state against a hardcoded baseline. This script is intended for manual review and execution by a system administrator.
Audit Metadata