windows-server

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPERSISTENCEPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides a wide array of PowerShell commands for managing Windows infrastructure, such as service control (Restart-Service), network configuration (Set-DnsClientServerAddress), and remote management (Invoke-Command).
  • [EXTERNAL_DOWNLOADS]: Includes instructions to fetch and install the PSWindowsUpdate module. This operation targets the PowerShell Gallery, an established and well-known registry for official and community-contributed PowerShell modules.
  • [PERSISTENCE]: Utilizes Windows Scheduled Tasks (Register-ScheduledTask) to implement automated workflows, such as weekly patching and daily maintenance scripts, which allow code to execute automatically at defined intervals.
  • [PRIVILEGE_ESCALATION]: Configures administrative tasks to run with the SYSTEM account and Highest run levels. These operations are intended for use by a system administrator and are part of the skill's primary functionality for server management.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines surfaces where external data is incorporated into administrative workflows.
  • Ingestion points: Processes user-supplied inputs for usernames, domain names, and passwords via Read-Host in SKILL.md.
  • Boundary markers: No specific delimiters or boundary warnings are present to isolate user-supplied strings from the command logic.
  • Capability inventory: The skill possesses broad capabilities, including arbitrary PowerShell execution, firewall management, and account administration across all provided script sections.
  • Sanitization: Follows security best practices by using the -AsSecureString parameter for password collection, ensuring that sensitive credentials are not stored or displayed in plain text.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 10:37 PM