microsoft-store-publisher

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes Windows SDK utilities including makeappx.exe for MSIX packaging and appcert.exe for application certification, as well as the Microsoft Edge browser for Partner Center automation.\n- [EXTERNAL_DOWNLOADS]: The skill's automation components depend on the playwright-core library, which typically downloads necessary browser binaries from official sources during the environment setup.\n- [PRIVILEGE_ESCALATION]: Execution of the Windows App Certification Kit (WACK) necessitates an elevated terminal environment. The skill instructions properly direct the user to provide this elevation manually, ensuring the agent does not attempt to bypass system authentication.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes metadata from MSIX manifests and content from Partner Center web pages. Risks are mitigated by strict operational rules that require explicit user approval for every state-changing or legally binding action.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 05:06 PM