windows-qa-engineer
Pass
Audited by Gen Agent Trust Hub on Nov 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: During the setup process, the skill clones the UFO automation framework from Microsoft's official GitHub repository, which is a trusted source.
- [COMMAND_EXECUTION]: The
skill_installer.pyanddoctor.ps1scripts utilize subprocess calls to manage Python virtual environments, install dependencies, and register the MCP server configuration. - [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it ingests and processes text content from the application under test.
- Ingestion points: The
textsandqa_refresh_controlstools inscripts/ufo_windows_qa_mcp_server.pyretrieve text from UI elements. - Boundary markers: No explicit markers are used to delimit UI content from instructions.
- Capability inventory: The skill has the ability to interact with the OS UI using
click_input,set_edit_text, andkeyboard_input. - Sanitization: The skill does not perform sanitization on text retrieved from the target application.
- [DYNAMIC_EXECUTION]: The installer executes verification Python code at runtime to confirm that all required UFO servers are correctly registered in the environment.
Audit Metadata