web-stop
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes a PowerShell script to manage system processes.
- Evidence:
powershell.exe -NoProfile -File "${CLAUDE_SKILL_DIR}/scripts/web-stop.ps1"is used to execute the shutdown logic. - Evidence: The PowerShell script uses
Stop-Process -Forceto terminate the web server. - Evidence: The Python implementation uses
psutil.Process.kill()to achieve the same result. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from a project configuration file which could be manipulated to point to different directories.
- Ingestion points: Reads
webPathfrom.v8-project.jsonto determine the Apache installation directory. - Boundary markers: Not present.
- Capability inventory: Process termination and file system path resolution across all scripts.
- Sanitization: The scripts validate the installation path by checking for the existence of
bin/httpd.exeand verifying the process executable path before attempting termination.
Audit Metadata