Skills busybox-on-windows

📦

busybox-on-windows

Content revision r1 High Risk ⚙️ External commands🌐 Network access

Run Unix Commands on Windows with BusyBox

Windows users may need familiar Unix command-line tools without installing a full Unix environment. This skill explains how to download BusyBox for Windows and run its bundled commands.

Supports: Claude Codex Code(CC)

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "busybox-on-windows" from https://skillstore.io/skills/sickn33-busybox-on-windows.md and its manifest at https://skillstore.io/api/skills/sickn33-busybox-on-windows/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/sickn33-busybox-on-windows.md Signed manifest GET /api/skills/sickn33-busybox-on-windows/manifest Signed lockfile GET /api/skills/sickn33-busybox-on-windows/lockfile

Test it

Using "busybox-on-windows". I need Unix commands on a Windows workstation.

Expected outcome:

The skill would confirm Windows usage, check processor and OS details, then select a matching BusyBox build.

Using "busybox-on-windows". How do I see which commands BusyBox includes?

Expected outcome:

The skill would direct you to BusyBox's command listing feature, then explain how to prefix commands with the executable name.

Using "busybox-on-windows". Can I use this on Linux or macOS?

Expected outcome:

No. The skill states that Unix users should stop because the guidance is only for Windows.

Security Audit

High Risk

v5 • 7/9/2026 Open versioned report

Most backtick findings are false positives caused by Markdown formatting. The confirmed risks are PowerShell execution guidance and unverified downloads of Windows executable files from a third-party host.

1

Files scanned

31

Lines analyzed

6

Review items

0

False positives ignored

Confirmed security concerns (1)

High

Unverified External Executable Download

The skill directs users to download Windows BusyBox executable builds from frippery.org as busybox.exe without checksum, signature, or release provenance verification. A compromised host or altered binary would become local code execution.

Lines 15-19 clearly instruct downloading executable files with PowerShell and provide no integrity verification step. The risk is supply-chain execution, not just the presence of a URL.

Capability review items (6)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

PowerShell invocation

These are PowerShell commands, if you have a classic `cmd.exe` terminal, then you must use `powershe

The skill explicitly tells users to invoke PowerShell from cmd.exe. This is real shell execution guidance, and it precedes download commands in the same setup flow.

High

PowerShell invocation

3. Download a suitable build of BusyBox by running one of these PowerShell commands:

The line introduces PowerShell commands for downloading a Windows executable. This is a real execution path with supply-chain risk because no integrity check is specified.

High

Hardcoded URL

- 32-bit x86 (ANSI): `$ProgressPreference = 'SilentlyContinue'; Invoke-WebRequest -Uri https://fripp

The URL is used by Invoke-WebRequest to download a Windows executable as busybox.exe. No checksum or signature verification is included before use.

High

Hardcoded URL

- 64-bit x86 (ANSI): `$ProgressPreference = 'SilentlyContinue'; Invoke-WebRequest -Uri https://fripp

The URL is used by Invoke-WebRequest to download a Windows executable as busybox.exe. No checksum or signature verification is included before use.

High

Hardcoded URL

- 64-bit x86 (Unicode): `$ProgressPreference = 'SilentlyContinue'; Invoke-WebRequest -Uri https://fr

The URL is used by Invoke-WebRequest to download a Windows executable as busybox.exe. No checksum or signature verification is included before use.

High

Hardcoded URL

- 64-bit ARM (Unicode): `$ProgressPreference = 'SilentlyContinue'; Invoke-WebRequest -Uri https://fr

The URL is used by Invoke-WebRequest to download a Windows executable as busybox.exe. No checksum or signature verification is included before use.

Risk Factors

⚙️ External commands (15)

SKILL.md:11 SKILL.md:12 SKILL.md:13 SKILL.md:14 SKILL.md:16 SKILL.md:17 SKILL.md:18 SKILL.md:19 SKILL.md:22 SKILL.md:23 SKILL.md:25 SKILL.md:27 SKILL.md:12 SKILL.md:15 SKILL.md:12

🌐 Network access (6)

SKILL.md:16 SKILL.md:17 SKILL.md:18 SKILL.md:19 SKILL.md:29 SKILL.md:30

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Security Assessment

Copy report link

https://skillstore.io/skills/sickn33-busybox-on-windows/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/sickn33-busybox-on-windows/security.svg)](https://skillstore.io/skills/sickn33-busybox-on-windows?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/sickn33-busybox-on-windows?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-busybox-on-windows/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/sickn33-busybox-on-windows.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

sickn33. (2026). busybox-on-windows security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-busybox-on-windows/audits/5

BibTeX citation

@techreport{sickn33-sickn33-busybox-on-windows-2026,
  author = {sickn33},
  title = {busybox-on-windows security audit report (audit version 5)},
  institution = {Skillstore},
  year = {2026},
  number = {5},
  url = {https://skillstore.io/skills/sickn33-busybox-on-windows/audits/5},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "busybox-on-windows security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
  - name: "sickn33"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/sickn33-busybox-on-windows/audits/5"
identifiers:
  - type: other
    value: "skillstore:sickn33-busybox-on-windows:audit:5"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

55

Architecture

85

Maintainability

85

Content

69

Community

91

Spec Compliance

What You Can Build

Use Unix Tools on Windows

Run common Unix-style commands on Windows without setting up a full Linux environment.

Choose a Windows Build

Check processor and Windows version details before selecting a BusyBox executable.

Standardize Simple CLI Tasks

Use one portable executable for basic command-line tasks across Windows test machines.

Try These Prompts

Check Applicability

I am working on Windows. Tell me whether this BusyBox skill applies and what setup checks come first.

Select a Build

Guide me through identifying my CPU and Windows version so I can choose the correct BusyBox for Windows build.

Run a BusyBox Command

Show me how to run a Unix-style directory listing through BusyBox on Windows.

Plan a Safer Install

Create a cautious installation checklist for this BusyBox workflow, including any missing verification steps.

Best Practices

Verify the downloaded BusyBox executable before running it.
Run setup commands only after user approval in a Windows shell.
Keep the BusyBox executable in a known project or tools directory.

Avoid

Do not run downloaded executables without provenance checks.
Do not use this skill on Linux, macOS, or WSL-only workflows.
Do not paste shell commands into an elevated terminal without review.

Frequently Asked Questions

What does this skill do?

It explains how to use a Windows build of BusyBox to access common Unix command-line tools.

Does it install BusyBox automatically?

No. It provides commands that a user or agent can review before running.

Which platforms are supported?

The skill is for Windows only. It tells Unix users to stop.

Does it require network access?

Yes. The setup commands download BusyBox from frippery.org, and the documentation links use external sites.

Does it verify the downloaded binary?

No. Users should add checksum or signature verification before running the executable.

Can Claude, Codex, or Claude Code use it?

Yes. They can use it as guidance, but shell commands should require explicit user approval.

Developer Details

Author

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/busybox-on-windows

Ref

3e4b6c31a74a3bd1a291c98cf585d720cb9fbc88

Maintenance freshness

7/18/2026

Usage

8 downloads · 112 views

File structure

More from sickn33

content-creator

Create Brand-Consistent Marketing Content

Marketing teams need content that stays consistent across channels. This skill helps plan, write, analyze, and optimize content for brand voice and SEO.

Writing & Content View

prompt-engineering-patterns

Improve LLM Prompts With Proven Patterns

Inconsistent prompts waste time and make AI outputs hard to trust. This skill guides prompt design with reusable patterns, examples, evaluation steps, and optimization workflows.

Productivity View

senior-fullstack

Build Fullstack Apps with Senior Patterns

Teams need consistent setup, architecture, and review guidance for modern web applications. This skill provides scaffolders, workflow references, and quality prompts for React, Next.js, Node.js, GraphQL, and PostgreSQL projects.

Coding & Development View

senior-architect

Design Scalable Software Architectures

Architecture decisions are hard to compare across web, mobile, backend, and cloud systems. This skill provides structured guides and local scaffold scripts for reports, dependency review, and trade-off documentation.

Coding & Development View

prompt-engineer

Optimize AI Prompts With Prompt Engineer

Writing clear prompts is hard when goals are vague or complex. This skill turns rough requests into structured prompts using proven prompt frameworks.

Productivity View

product-manager-toolkit

Prioritize Product Work With Research Insights

Product teams need faster ways to rank features, synthesize interviews, and document decisions. This skill provides RICE scoring, interview analysis, and PRD templates for structured planning.

Productivity View

charset-fix

Fix Windows AI Agent Encoding

by gkd2323c

Windows POSIX shells can garble Chinese output from Python, PowerShell, and cmd.exe. This skill gives targeted UTF-8 and GBK fixes for Claude, Codex, and related agents.

DevOps & Infrastructure View

infsh-cli

Run AI Apps with the inference.sh CLI

by inferen-sh

Using many hosted AI models from a terminal requires different app names, inputs, and task flows. This skill provides focused inference.sh CLI guidance.

DevOps & Infrastructure View

bitbucket-jira-cli

Manage Bitbucket and Jira from the Terminal

by spenhouet

Bitbucket and Jira workflows often require separate tools and repeated context switching. This skill maps both services into focused bj CLI operations.

DevOps & Infrastructure View

powershell-expert

Build Reliable PowerShell Tools

by hmohamed01

PowerShell projects need consistent structure, safe parameters, and current module guidance. This skill helps create scripts, modules, and GUIs using practical PowerShell references.

Coding & Development View

gws-tasks

Manage Google Tasks from Your AI Assistant

by googleworkspace

Managing Google Tasks through an API requires accurate resource names, methods, parameters, and identifiers. This skill guides Google Workspace CLI operations for lists and tasks.

Productivity View

shell-scripting

Write Safer Shell Scripts

by CodingKaiser

Shell scripts often fail because of quoting, error handling, and portability mistakes. This skill gives Claude, Codex, and Claude Code practical Bash and Zsh guidance for safer automation.

Coding & Development View