Security audit
winget-package-manager
Security checks for vulnerabilities and agentic risk
Overview
This is a prompt-only Windows package management skill that can guide software installs, upgrades, and removals, but its authority is clearly disclosed and scoped to winget.
Install this only if you want an agent to help manage Windows apps through winget. Review exact package IDs before approving installs, upgrades, or removals, and do not approve elevation or installer dialogs unless they match the action you requested.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.