The Agent Skills Directory

[SAFE]: The skill provides technical documentation for .NET MAUI HybridWebView interop. It correctly identifies and promotes security best practices, such as using source-generated JSON serialization (JsonSerializerContext) to avoid reflection-based deserialization issues and support NativeAOT.
[INDIRECT_PROMPT_INJECTION]: The skill documents the architecture for JavaScript to C# communication, which constitutes a potential attack surface if untrusted web content is loaded.
Ingestion points: Data enters the managed context via InvokeDotNet parameters and the RawMessageReceived event handler in references/hybridwebview-api.md.
Boundary markers: None present in the architectural examples provided.
Capability inventory: JavaScript can trigger C# methods registered through SetInvokeJavaScriptTarget.
Sanitization: Not demonstrated in the simplified API examples. This finding identifies the surface area inherent to the technology being documented and is not an indication of malicious intent.

maui-hybridwebview