windows-cleanup

Pass

Audited by Gen Agent Trust Hub on Oct 11, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were detected. The skill instructions prioritize system stability and data integrity by enforcing read-only assessments and requiring explicit authorization for any modifications. All external documentation links refer to official Microsoft domains.
  • [INDIRECT_PROMPT_INJECTION]: The skill has a potential attack surface through the ingestion of system telemetry and logs, which could theoretically be manipulated by local malicious actors. This risk is managed by the following controls:
  • Ingestion points: System diagnostic outputs including Task Manager process lists, Event Viewer logs, and Defender detection history.
  • Boundary markers: Comprehensive safety boundaries and prohibited operations are explicitly defined in the documentation (references/safety-boundaries.md) to prevent the agent from following unsafe instructions embedded in data.
  • Capability inventory: The skill uses authorized Windows tools (DISM, SFC, CHKDSK, defrag, powercfg) and managed file cleanup via system-supported mechanisms.
  • Sanitization: The workflow mandates a 'preview and confirm' step for all actions, ensuring a human-in-the-loop reviews every proposed mutation before execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 11, 2026, 03:40 PM