move-big-folder
Warn
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends downloading a disk analysis utility from a Quark Pan sharing link (https://pan.quark.cn/s/f79bdadb9716). While hosted on a well-known platform, the binary is provided by an unverified third-party author.
- [COMMAND_EXECUTION]: The skill provides instructions for the recursive and forced deletion of folders using Remove-Item -Recurse -Force. This is a high-risk operation that can lead to data loss if used on critical system paths or with malicious input.
- [COMMAND_EXECUTION]: The skill requires Administrator privileges for the creation of symbolic links. Running commands at this privilege level based on unverified external tools increases the risk of system compromise.
- [PROMPT_INJECTION]: The skill processes user-provided file paths, which serves as an injection surface for indirect prompt injection. 1. Ingestion points: Folder path input in SKILL.md. 2. Boundary markers: None. 3. Capability inventory: High-privilege PowerShell file system operations. 4. Sanitization: None; the safety checks are natural-language based and do not technically validate the input string.
Audit Metadata