skills/qinglele-hy/codex-portable-windows-bundle-skill/windows-portable-app-bundle/Gen Agent Trust Hub
windows-portable-app-bundle
Warn
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: MEDIUMDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
- [DATA_EXFILTRATION]: The skill's core workflow instructs the agent to locate and copy 'live user config' and 'backup config' directories into a shareable ZIP archive. These directories frequently contain highly sensitive information such as API keys, session tokens, and personal data. While the skill includes a rule to warn the user, the primary function is the collection and packaging of this data into a portable format.
- [COMMAND_EXECUTION]: The skill directs the agent to create a 'launcher' script intended for execution on a recipient's system. This script is designed to perform file system operations (backing up and importing configurations) and launch an executable. Generating scripts for cross-machine execution introduces a risk of malicious or unintended system modifications.
Audit Metadata