recovering-from-ransomware-attack

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a legitimate defensive utility for cybersecurity incident response. It provides structured workflows for environment isolation, identity infrastructure recovery, and phased system restoration.\n- [SAFE]: Python scripts (agent.py and process.py) use standard libraries to manage recovery checklists and generate reports. They do not perform unauthorized network operations or access sensitive system files.\n- [SAFE]: All external references provided in the documentation link to reputable security organizations, including CISA, NIST, and Microsoft's official documentation.\n- [SAFE]: Command-line examples for PowerShell and Bash follow established best practices for ransomware remediation, such as the Directory Services Restore Mode (DSRM) and Kerberos ticket invalidation procedures.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 04:48 AM