web-stop

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill invokes a PowerShell script to manage system processes.
  • Evidence: powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/web-stop.ps1" is used to execute the shutdown logic.
  • Evidence: The PowerShell script uses Stop-Process -Force to terminate the web server.
  • Evidence: The Python implementation uses psutil.Process.kill() to achieve the same result.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from a project configuration file which could be manipulated to point to different directories.
  • Ingestion points: Reads webPath from .v8-project.json to determine the Apache installation directory.
  • Boundary markers: Not present.
  • Capability inventory: Process termination and file system path resolution across all scripts.
  • Sanitization: The scripts validate the installation path by checking for the existence of bin/httpd.exe and verifying the process executable path before attempting termination.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 05:16 PM