windows-workspace-ops
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of system utilities including
git,gh(GitHub CLI),powershell,cmd, andpythonto automate workspace management and publication tasks. - Evidence includes instructions for cloning repositories, managing remotes, and performing build/tag/publish cycles.
- [DYNAMIC_EXECUTION]: The skill employs inline Python scripts (
python -c) to perform byte-exact file edits and create NTFS junctions using the_winapimodule. These techniques are used to overcome specific limitations of standard Windows CLI tools in complex development environments. - [INDIRECT_PROMPT_INJECTION]: The skill operates on external data through Git repository cloning and file system operations.
- Ingestion points: External code is brought into the workspace via
gh repo clone(SKILL.md). - Boundary markers: The skill explicitly instructs the agent to "Review the source and copy only release-owned files" and to "Inspect junctions first" before copying (SKILL.md).
- Capability inventory: The skill has the ability to perform file writes (Python), push to remote repositories (
git push), and execute shell commands across various scripts. - Sanitization: The skill relies on manual review and verification steps (e.g., checksum comparison, SHA verification) to ensure the integrity of assets before publication.
Audit Metadata