winui
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEPERSISTENCEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PERSISTENCE]: In
references/patterns.md, the skill documents the use ofBackgroundTaskBuilderto register Windows background tasks. While this is a standard and expected feature of the Windows App SDK, this API allows code to be scheduled and executed across system reboots and independent of the application's primary lifecycle. - [DYNAMIC_EXECUTION]: The navigation service pattern outlined in
references/patterns.mddemonstrates dynamic type resolution usingType.GetTypewith string interpolation (e.g.,Type.GetType($"MyApp.ViewModels.{tag}ViewModel")). This pattern can be risky if thetagidentifier is derived from untrusted external configuration files or user-influenced XAML metadata, as it could lead to the instantiation of unexpected types. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted repository data, including source code and build configurations, and has the capability to edit files and run commands. The lack of explicit boundary markers or instructions to ignore natural language prompts within the processed files creates a surface where instructions hidden in code comments or project metadata could influence the agent's behavior.
- Ingestion points: Source code, XAML, and project files accessed via repository inspection.
- Boundary markers: None identified in instructions.
- Capability inventory: File editing, build execution, and validation command execution.
- Sanitization: None identified for processed code content.
Audit Metadata