devexpress-wpf-from-screenshot
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Executes local, bundled PowerShell scripts (
build-run-capture.ps1andmeasure-render.ps1) to perform MSBuild/dotnet build operations and manage the application lifecycle for UI testing. These commands are necessary for the skill's stated purpose and target standard developer tooling. - [DYNAMIC_EXECUTION]: Uses the PowerShell
Add-Typecmdlet to compile C# wrappers for Win32 APIs (e.g.,user32.dllfor window management andUIAutomationClientfor tree inspection). This is a standard and expected method for interacting with the Windows desktop environment in the context of UI automation and screen capture. - [INDIRECT_PROMPT_INJECTION]: Ingests external Figma design files and local project metadata. While this represents a potential attack surface for indirect prompt injection, the risk is mitigated by the skill's focus on structured UI generation and its use of strict validation gates, requiring specific artifact paths and UI tree counts before proceeding.
Audit Metadata