busybox-on-windows
Fail
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses PowerShell's
Invoke-WebRequestto download executable files (busybox.exe,busybox64.exe, etc.) from an external, third-party domain:https://frippery.org/files/busybox/. - [COMMAND_EXECUTION]: The instructions explicitly guide the agent to run the downloaded
busybox.exefile and pass arguments to it (e.g.,busybox.exe ls -1). - [REMOTE_CODE_EXECUTION]: The workflow of downloading a binary from an untrusted external source and subsequently executing it on the local system constitutes a remote code execution risk.
Recommendations
- AI detected serious security threats
Audit Metadata