windows-workspace-ops

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill makes extensive use of system utilities including git, gh (GitHub CLI), powershell, cmd, and python to automate workspace management and publication tasks.
  • Evidence includes instructions for cloning repositories, managing remotes, and performing build/tag/publish cycles.
  • [DYNAMIC_EXECUTION]: The skill employs inline Python scripts (python -c) to perform byte-exact file edits and create NTFS junctions using the _winapi module. These techniques are used to overcome specific limitations of standard Windows CLI tools in complex development environments.
  • [INDIRECT_PROMPT_INJECTION]: The skill operates on external data through Git repository cloning and file system operations.
  • Ingestion points: External code is brought into the workspace via gh repo clone (SKILL.md).
  • Boundary markers: The skill explicitly instructs the agent to "Review the source and copy only release-owned files" and to "Inspect junctions first" before copying (SKILL.md).
  • Capability inventory: The skill has the ability to perform file writes (Python), push to remote repositories (git push), and execute shell commands across various scripts.
  • Sanitization: The skill relies on manual review and verification steps (e.g., checksum comparison, SHA verification) to ensure the integrity of assets before publication.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 12:44 AM