windows-server
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPERSISTENCEPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a wide array of PowerShell commands for managing Windows infrastructure, such as service control (
Restart-Service), network configuration (Set-DnsClientServerAddress), and remote management (Invoke-Command). - [EXTERNAL_DOWNLOADS]: Includes instructions to fetch and install the
PSWindowsUpdatemodule. This operation targets the PowerShell Gallery, an established and well-known registry for official and community-contributed PowerShell modules. - [PERSISTENCE]: Utilizes Windows Scheduled Tasks (
Register-ScheduledTask) to implement automated workflows, such as weekly patching and daily maintenance scripts, which allow code to execute automatically at defined intervals. - [PRIVILEGE_ESCALATION]: Configures administrative tasks to run with the
SYSTEMaccount andHighestrun levels. These operations are intended for use by a system administrator and are part of the skill's primary functionality for server management. - [INDIRECT_PROMPT_INJECTION]: The skill defines surfaces where external data is incorporated into administrative workflows.
- Ingestion points: Processes user-supplied inputs for usernames, domain names, and passwords via
Read-HostinSKILL.md. - Boundary markers: No specific delimiters or boundary warnings are present to isolate user-supplied strings from the command logic.
- Capability inventory: The skill possesses broad capabilities, including arbitrary PowerShell execution, firewall management, and account administration across all provided script sections.
- Sanitization: Follows security best practices by using the
-AsSecureStringparameter for password collection, ensuring that sensitive credentials are not stored or displayed in plain text.
Audit Metadata