busybox-on-windows
Fail
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download various executable versions of BusyBox (e.g.,
busybox.exe,busybox64.exe,busybox64u.exe) from the external domainhttps://frippery.org/files/busybox/using the PowerShellInvoke-WebRequestcommand. - [REMOTE_CODE_EXECUTION]: Following the download, the skill instructs the agent to execute these binaries to provide UNIX-like command capabilities. Running unverified binaries from external sources constitutes a remote code execution risk, as the integrity and safety of the external file cannot be guaranteed.
- [COMMAND_EXECUTION]: The skill uses PowerShell commands to query sensitive system information, including CPU specifications via
Get-CimInstance -ClassName Win32_Processorand detailed Windows versioning info from the registry viaGet-ItemProperty "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion".
Recommendations
- AI detected serious security threats
Audit Metadata