configuring-active-directory-tiered-model

Pass

Audited by Gen Agent Trust Hub on Apr 12, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/agent.py implements LDAP search operations to audit Active Directory security. It queries for sensitive groups (e.g., Domain Admins, Enterprise Admins) and user attributes (e.g., adminCount, userAccountControl) to identify Tier 0 accounts and cross-tier privilege violations.
  • [EXTERNAL_DOWNLOADS]: The skill references and utilizes the well-known ldap3 library for directory service communication and mentions the pyad library in the documentation. These are standard, reputable packages used for systems administration.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 12, 2026, 06:19 PM