windows-rescue-from-linux

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 在 scripts/boot-diagnostic.sh 之執行會直接透過 python3 -m Evtx.Evtx "$WIN_MNT/Windows/System32/winevt/Logs/System.evtx" 解析 Windows System.evtx（使用者主機/目標磁碟上的資料，屬於 outsider 可控制的檔案內容），並將其文字輸出到報告供後續 agent 使用。

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes explicit runtime installation commands that fetch and execute remote code — e.g. curl -fsSL https://deb.nodesource.com/setup_20.x | sudo -E bash (references/00-rescue-usb-preparation.md:114) and curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.39.7/install.sh | bash (references/00-rescue-usb-preparation.md:128), and a git clone of a repository followed by build/install steps (https://github.com/pbatard/ms-sys.git in references/14-cli-tools-catalog.md:218-221) which, if run, download and execute external code that the skill may rely on for runtime capabilities.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill explicitly instructs the agent to run sudo installation scripts and destructive system commands (ntfsfix, chntpw, deleting hiberfil.sys, registry edits, mounting/umount, ddrescue, etc.) that modify system state and require elevated privileges, so it should be flagged.