busybox-on-windows
Fail
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to download binary executables (e.g.,
busybox.exe,busybox64.exe) fromhttps://frippery.org/files/busybox/using PowerShell'sInvoke-WebRequest. - [REMOTE_CODE_EXECUTION]: By combining the download of an external binary with instructions on how to run it (
./busybox.exe), the skill enables a remote code execution vector. The source domain is not a recognized trusted vendor or well-known service. - [COMMAND_EXECUTION]: The skill provides explicit instructions to execute the downloaded binary on the user's system to perform various tasks.
- [DATA_EXPOSURE]: The skill includes steps to extract system information, such as CPU details and specific Windows OS version data from the registry, though this is primarily used for environment detection.
Recommendations
- AI detected serious security threats
Audit Metadata