The Agent Skills Directory

Command Execution: The skill utilizes the dotnet CLI and a specialized maui devflow CLI to build projects, manage packages, and perform diagnostics. These operations are restricted to the local development environment and are consistent with the skill's primary function of setting up developer tooling.
File System Interaction: The skill scans for .NET project files and modifies C# source code (MauiProgram.cs) and XML configuration files (.csproj, Directory.Packages.props). This behavior is inherent to the onboarding process for adding NuGet dependencies and initializing required library components.
Indirect Prompt Injection Surface: As the skill parses existing project files to determine the application's configuration (e.g., whether it is a Blazor WebView or GTK project), it could theoretically process malicious instructions embedded within those files. However, the risk is considered low as the skill primarily extracts structured metadata like package references and target frameworks rather than executing arbitrary text from the project files.
Vendor-Aligned Dependencies: The skill references several Microsoft.Maui.DevFlow.* NuGet packages. These packages align with the documented vendor identity and represent expected infrastructure for the described developer workflow.

maui-devflow-onboard