winmd-api-search
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the
Microsoft.WindowsAppSDKpackage from NuGet during the cache generation process to provide baseline API coverage. This is a standard operation using official Microsoft repositories. - [COMMAND_EXECUTION]: The
Update-WinMdCache.ps1script executes the .NET CLI (dotnet restoreanddotnet build) to compile the internal cache generator utility. - [DYNAMIC_EXECUTION]: As part of its setup, the skill compiles and runs a local C# console application (
CacheGenerator.exe) that parses binary WinMD files and exports them to a JSON format for searching. - [INDIRECT_PROMPT_INJECTION]: The skill processes local project files (
.csproj,.vcxproj) and Windows metadata files, creating a potential surface for indirect prompt injection if malicious files are present in the repository. - Ingestion points:
Program.csreads metadata from local project files and WinMD binaries. - Boundary markers: No explicit delimiters are used to separate parsed metadata from agent instructions.
- Capability inventory: The skill can execute shell commands via PowerShell and invoke the .NET build system.
- Sanitization: Metadata contents are parsed as binary types without specific sanitization against instruction-like text strings.
Audit Metadata