desktop-winui3
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No evidence of prompt injection, role-play instructions, or safety bypass attempts was found. The instructions use natural technical language to guide the agent in assisting with WinUI 3 development.
- [DATA_EXFILTRATION]: No sensitive data access or exfiltration patterns were detected. The skill correctly instructs users to keep secrets out of code and use secrets managers.
- [EXTERNAL_DOWNLOADS]: All external references, including NuGet packages and GitHub Actions, point to reputable and well-known sources (e.g., Microsoft organizations, Community Toolkits). The use of the DigiCert timestamp service is a standard industry practice for code signing.
- [COMMAND_EXECUTION]: The skill provides standard build and deployment commands (e.g., dotnet, msbuild, powershell) that are appropriate for the developer context and do not pose a security risk in this context.
- [REMOTE_CODE_EXECUTION]: No suspicious remote script execution patterns (like piping curl to bash) were identified. All script examples are intended for local development and build pipelines.
- [OBFUSCATION]: No obfuscated content, such as Base64-encoded strings, zero-width characters, or homoglyphs, was found in any of the files.
Audit Metadata