setup-windows
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple system commands to verify environmental state (winver, wsl --status, docker --version) and perform configuration tasks through package managers (apt-get, npm).
- [REMOTE_CODE_EXECUTION]: Downloads and executes a Node.js setup script from NodeSource (https://deb.nodesource.com/setup_20.x) by piping the content directly to a shell. This is a standard and well-known method for Node.js distribution on Linux environments.
- [PRIVILEGE_ESCALATION]: Requires administrative access to install the Windows Subsystem for Linux (WSL) and uses sudo within the Linux environment to modify system configuration files such as /etc/wsl.conf.
- [PERSISTENCE]: Instructs the user on how to configure auto-start mechanisms using the Windows Task Scheduler and Linux shell profiles (~/.bashrc) to ensure the tool is available upon login.
Audit Metadata