registry-forensics
Warn
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: MEDIUMDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill is designed to access and parse highly sensitive system files, including the Security Account Manager (SAM) hive, which contains user account details and password hints, as well as the SYSTEM and NTUSER.DAT hives. This exposes significant system metadata and user activity history to the agent context.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from untrusted external sources (registry hives) and possesses high-privilege file-writing capabilities, creating a potential surface for indirect injection attacks.
- Ingestion points: Registry hive files located in user-specified directories (e.g., /evidence/NTUSER.DAT, /evidence/SAM).
- Boundary markers: The skill does not employ explicit delimiters or safety instructions to distinguish between extracted registry data and operational instructions.
- Capability inventory: The skill can search for sensitive strings like 'password', export registry keys to .reg files, and generate comprehensive reports in .html, .csv, and .json formats.
- Sanitization: There is no documented evidence of sanitization or validation of the registry data before it is processed or included in output reports.
Audit Metadata