task-scheduler
Warn
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to dynamically generate and execute PowerShell scripts in the system temporary directory (
%TEMP%) to register jobs in the Windows Task Scheduler using theRegister-ScheduledTaskcommand. - [EXTERNAL_DOWNLOADS]: The
scripts/notify.ps1script automatically installs theBurntToastPowerShell module from the PowerShell Gallery usingInstall-Moduleif the module is not already present on the system. - [COMMAND_EXECUTION]: The
scripts/agent.ps1script executes an external command namedagentusing user-provided strings as the prompt. While the instructions include sanitization steps (such as quoting and newline replacement), there remains a risk of command injection if the AI fails to properly escape adversarial inputs when constructing the registration script.
Audit Metadata