desktop-winui3

Pass

Audited by Gen Agent Trust Hub on Jun 29, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: No evidence of prompt injection, role-play instructions, or safety bypass attempts was found. The instructions use natural technical language to guide the agent in assisting with WinUI 3 development.
  • [DATA_EXFILTRATION]: No sensitive data access or exfiltration patterns were detected. The skill correctly instructs users to keep secrets out of code and use secrets managers.
  • [EXTERNAL_DOWNLOADS]: All external references, including NuGet packages and GitHub Actions, point to reputable and well-known sources (e.g., Microsoft organizations, Community Toolkits). The use of the DigiCert timestamp service is a standard industry practice for code signing.
  • [COMMAND_EXECUTION]: The skill provides standard build and deployment commands (e.g., dotnet, msbuild, powershell) that are appropriate for the developer context and do not pose a security risk in this context.
  • [REMOTE_CODE_EXECUTION]: No suspicious remote script execution patterns (like piping curl to bash) were identified. All script examples are intended for local development and build pipelines.
  • [OBFUSCATION]: No obfuscated content, such as Base64-encoded strings, zero-width characters, or homoglyphs, was found in any of the files.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 29, 2026, 08:46 PM
Security Audit — agent-trust-hub — desktop-winui3