mdm-device-management

Pass

Audited by Gen Agent Trust Hub on Oct 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a technical guide for infrastructure management. It provides practical examples for device enrollment and hardening without including malicious payloads or obfuscated code.
  • [COMMAND_EXECUTION]: The instructions utilize administrative commands (e.g., fdesetup, manage-bde, Set-NetFirewallProfile) to enforce security baselines. These are essential for the skill's primary purpose of securing company endpoints.
  • [EXTERNAL_DOWNLOADS]: The skill documentation references official tools such as fleetctl from FleetDM and Microsoft's Get-WindowsAutoPilotInfo. The use of these well-known services for MDM tasks is appropriate and safe.
  • [REMOTE_CODE_EXECUTION]: The skill includes onboarding automation patterns, such as downloading a configuration file from an internal company URL to execute via Homebrew Bundle. These are standard DevOps practices and include explicit warnings for manual review and pinning.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines workflows for processing data from external MDM platforms and cloud APIs. The documentation provides clear boundaries and emphasizes human-in-the-loop verification for sensitive actions like remote wipes, maintaining a low risk profile.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 26, 2026, 02:15 PM