The Agent Skills Directory

[COMMAND_EXECUTION]: The Python adaptation layer in lib/python/windows_agent/act.py and perceive.py utilizes subprocess.run to call internal automation scripts located within the project's engines directory. These calls use static relative paths and serve to bridge the glue layer with specialized GUI automation engines.
[EXTERNAL_DOWNLOADS]: The scripts/install.ps1 script performs standard environment setup by cloning git submodules and installing Python dependencies from the official Python Package Index (PyPI). The referenced sources, including Microsoft-owned repositories, align with the project's stated purpose of integrating established open-source Windows tools.
[INDIRECT_PROMPT_INJECTION]: The skill's architecture involves inspecting application UIs via element trees and screenshots, which represents a potential attack surface for indirect prompt injection. The skill mitigates this by providing explicit model instructions to follow safety checklists and enforcing a requirement for human confirmation of destructive operations.
[DYNAMIC_EXECUTION]: The suite dynamically dispatches GUI automation tasks to external scripts at runtime. This behavior is mediated by a dispatcher that enforces a global audit log and destructive action validation.
[PRIVILEGE_ESCALATION]: The skill provides tools for administrative tasks such as registry editing and service management. Security is maintained through a specialized module that performs automatic backups and a path validation utility that restricts operations on sensitive system folders.
[PERSISTENCE]: Functionality is included to create and manage Windows Scheduled Tasks. This is an intended administrative feature and is subject to the suite's integrated auditing and safety confirmation protocols.

windows-agent