new-windows-app
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSPERSISTENCE
Full Analysis
- [COMMAND_EXECUTION]: The skill performs local shell operations to automate the development lifecycle of the generated Windows application.
- Evidence:
build.ps1executesdotnet buildto compile the project androbocopyto mirror binaries to the installation directory. - Evidence:
new-app.ps1initializes a local git repository for version control of the new project. - Evidence:
tools/common.ps1launches the application binary usingStart-Processto perform automated verification. - [INDIRECT_PROMPT_INJECTION]: The skill uses a log-based communication channel to allow the agent to verify the application's runtime state and test results.
- Ingestion points:
tools/common.ps1reads the log file populated by the application (viaAgentLog.cs). - Boundary markers: Content is printed to the agent context without specific delimiters.
- Capability inventory: The agent can execute build commands and modify local files.
- Sanitization: No filtering is performed on the ingested log data.
- [EXTERNAL_DOWNLOADS]: The template includes project files that depend on established, well-known development libraries from official package registries.
- Evidence: The application utilizes libraries such as
Microsoft.WindowsAppSDKandCommunityToolkit.Mvvm, which are standard for WinUI development and sourced from the official NuGet registry. - [PERSISTENCE]: The installation script creates a Start menu shortcut for the generated application.
- Evidence:
build.ps1uses theWScript.ShellCOM object to create a.lnkfile in the user's Programs folder, which is a standard method for application installation on Windows.
Audit Metadata