Security audit

Pwsh Encoding Fix

Security checks for vulnerabilities and agentic risk

Overview

This is a focused PowerShell encoding repair tool, but its script runs a shell command using the provided file path and can overwrite files in fix mode, so it should be reviewed before use.

Install only if you need a local PowerShell encoding diagnostic/repair helper. Run it on files you control, avoid unusual or attacker-supplied file paths, and use `--fix` only after you are comfortable with it rewriting the target file while creating a `.bak` backup.

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

Detected: suspicious.dangerous_exec

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: pwsh-encoding-fix.js:118