new-windows-app

Pass

Audited by Gen Agent Trust Hub on Nov 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSPERSISTENCE
Full Analysis
  • [COMMAND_EXECUTION]: The skill performs local shell operations to automate the development lifecycle of the generated Windows application.
  • Evidence: build.ps1 executes dotnet build to compile the project and robocopy to mirror binaries to the installation directory.
  • Evidence: new-app.ps1 initializes a local git repository for version control of the new project.
  • Evidence: tools/common.ps1 launches the application binary using Start-Process to perform automated verification.
  • [INDIRECT_PROMPT_INJECTION]: The skill uses a log-based communication channel to allow the agent to verify the application's runtime state and test results.
  • Ingestion points: tools/common.ps1 reads the log file populated by the application (via AgentLog.cs).
  • Boundary markers: Content is printed to the agent context without specific delimiters.
  • Capability inventory: The agent can execute build commands and modify local files.
  • Sanitization: No filtering is performed on the ingested log data.
  • [EXTERNAL_DOWNLOADS]: The template includes project files that depend on established, well-known development libraries from official package registries.
  • Evidence: The application utilizes libraries such as Microsoft.WindowsAppSDK and CommunityToolkit.Mvvm, which are standard for WinUI development and sourced from the official NuGet registry.
  • [PERSISTENCE]: The installation script creates a Start menu shortcut for the generated application.
  • Evidence: build.ps1 uses the WScript.Shell COM object to create a .lnk file in the user's Programs folder, which is a standard method for application installation on Windows.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 3, 2026, 08:53 AM