maui-ai-tool-bindings
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- External Package Dependency: The skill involves the installation of the
Microsoft.Maui.AI.AttributesNuGet package. This package is an official component of the .NET ecosystem provided by a trusted vendor and is essential for the skill's functionality to source-generate AI tool bindings. - Indirect Prompt Injection Surface: The skill defines how to create AI-callable tools that process user-provided input through method parameters. While this technically creates a surface for indirect prompt injection, the skill follows secure design principles by documenting the use of
ApprovalRequired = truefor sensitive mutations, which mitigates risk by requiring user confirmation before executing potentially harmful actions. - Controlled Execution Context: The instructions emphasize the use of explicit
AIToolContextclasses and dependency injection (DI) to scope tool access. This allows for a granular and stable tool surface area, reducing the risk of unintended capability exposure to the AI agent.
Audit Metadata