maui-aspire
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and provides commands to download development skills and samples from official Microsoft/Azure domains. These resources are used to provision Entra ID app registrations and implement authentication logic.
- [COMMAND_EXECUTION]: The documentation includes standard CLI commands for the .NET ecosystem, such as project building and service execution, as well as Android platform tools for emulator management. These are necessary for the development tasks described.
- [INDIRECT_PROMPT_INJECTION]: The skill contains structured code templates and architectural patterns that the agent may use to generate application code. This ingestion surface is well-defined, and the instructions emphasize standard security practices like using MSAL.NET for public client authentication.
- [SAFE]: The documentation describes a common development pattern of disabling SSL certificate validation for Android emulators. This pattern is correctly restricted to debug-only compilation blocks and contains explicit warnings against production use, which aligns with standard security guidance for local mobile development.
Audit Metadata