skills/mukul975/anthropic-cybersecurity-skills/hunting-for-persistence-mechanisms-in-windows/Gen Agent Trust Hub
hunting-for-persistence-mechanisms-in-windows
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate cybersecurity toolkit designed for proactive threat hunting. All operations are transparent and align with the described purpose.
- [COMMAND_EXECUTION]: The
scripts/agent.pyscript executes built-in Windows utilities (reg query,schtasks,wmic) viasubprocess.runto gather system information. - These operations are used for legitimate diagnostic purposes.
- The commands and their parameters are hardcoded within the script, preventing command injection from external sources.
- [EXTERNAL_DOWNLOADS]: No external network operations or package downloads were identified. The scripts depend solely on the Python standard library and local system binaries.
- [DATA_EXFILTRATION]: There is no evidence of data being sent to external servers. The scripts output findings to the local console or save reports to a user-specified local directory.
Audit Metadata