microsoft-store-publisher
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes Windows SDK utilities including
makeappx.exefor MSIX packaging andappcert.exefor application certification, as well as the Microsoft Edge browser for Partner Center automation.\n- [EXTERNAL_DOWNLOADS]: The skill's automation components depend on theplaywright-corelibrary, which typically downloads necessary browser binaries from official sources during the environment setup.\n- [PRIVILEGE_ESCALATION]: Execution of the Windows App Certification Kit (WACK) necessitates an elevated terminal environment. The skill instructions properly direct the user to provide this elevation manually, ensuring the agent does not attempt to bypass system authentication.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes metadata from MSIX manifests and content from Partner Center web pages. Risks are mitigated by strict operational rules that require explicit user approval for every state-changing or legally binding action.
Audit Metadata