Skills
Navigate
skills/davidortinau/maui-skills/maui-deep-linking/Gen Agent Trust Hub

maui-deep-linking

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill documents the handling of external URLs from Android Intents and iOS User Activities. This untrusted data is passed to the application's navigation system.
  • Ingestion points: External URLs enter the application context via intent.Data (Android) and activity.WebPageUrl (iOS), as documented in references/deep-linking-api.md.
  • Boundary markers: The provided implementation does not include explicit delimiters or instructions to ignore potential commands embedded within the URL parameters.
  • Capability inventory: The skill utilizes Shell.Current.GoToAsync to perform application-level navigation based on the parsed URL content.
  • Sanitization: The skill provides a MapToRoute function that uses basic string splitting and segment matching to determine the destination, providing a rudimentary filter for navigation targets.
  • [COMMAND_EXECUTION]: The documentation includes shell commands intended for developer testing and diagnostic purposes.
  • Evidence: Inclusion of adb shell pm get-app-links com.example.myapp and swcutil dl -d example.com in SKILL.md.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 01:12 PM