mdm-device-management
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a technical guide for infrastructure management. It provides practical examples for device enrollment and hardening without including malicious payloads or obfuscated code.
- [COMMAND_EXECUTION]: The instructions utilize administrative commands (e.g.,
fdesetup,manage-bde,Set-NetFirewallProfile) to enforce security baselines. These are essential for the skill's primary purpose of securing company endpoints. - [EXTERNAL_DOWNLOADS]: The skill documentation references official tools such as
fleetctlfrom FleetDM and Microsoft'sGet-WindowsAutoPilotInfo. The use of these well-known services for MDM tasks is appropriate and safe. - [REMOTE_CODE_EXECUTION]: The skill includes onboarding automation patterns, such as downloading a configuration file from an internal company URL to execute via Homebrew Bundle. These are standard DevOps practices and include explicit warnings for manual review and pinning.
- [INDIRECT_PROMPT_INJECTION]: The skill defines workflows for processing data from external MDM platforms and cloud APIs. The documentation provides clear boundaries and emphasizes human-in-the-loop verification for sensitive actions like remote wipes, maintaining a low risk profile.
Audit Metadata