winui-wpf-migration

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • Command Execution: The skill instructs the agent to execute local commands and scripts to facilitate the migration process.
  • Evidence: The skill uses winapp new to generate projects and .\BuildAndRun.ps1 to validate the build. These are typical operations for a development-focused skill intended to automate environment setup and testing.
  • Indirect Prompt Injection Surface: The skill includes patterns for auditing local source code files, which creates a potential surface for indirect instructions.
  • Evidence Chain:
  • Ingestion points: The agent is instructed to read local C# files (*.cs) using PowerShell's Select-String to identify namespace usage.
  • Boundary markers: No specific delimiters are used when the agent processes the content of these source files.
  • Capability inventory: The skill utilizes PowerShell for file system navigation and string searching, along with the winapp CLI tool for project creation.
  • Sanitization: There is no explicit sanitization or filtering of the file content before it is processed by the search commands. While this is standard for audit tasks, it is a surface to be aware of when the agent interacts with external code.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 01:08 AM