windows-storage-audit
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes native Windows commands such as dism.exe, vssadmin.exe, and fsutil.exe through PowerShell and Python scripts. These tools are used for storage inventory, analyzing the component store, and listing shadow copies.
- [DYNAMIC_EXECUTION]: The Python scanner script uses the ctypes library to access kernel32.dll for low-level filesystem metadata retrieval. This allows for precise calculation of physical allocation and file identity deduplication without external dependencies.
- [INDIRECT_PROMPT_INJECTION]: The skill processes file system data, which constitutes a potential attack surface. Mandatory Evidence Chain: 1. Ingestion points: File names and metadata traversed by scripts/scan_storage.py and scripts/collect_system_storage.ps1. 2. Boundary markers: Instructions mandate a reviewable manifest and explicit user authorization for all cleanup tasks. 3. Capability inventory: File deletion (Remove-Item) and system servicing (dism.exe). 4. Sanitization: Paths are validated to block UNC inputs and redirection via reparse points.
Audit Metadata