winui-wpf-migration
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill instructs the agent to execute local commands and scripts to facilitate the migration process.
- Evidence: The skill uses
winapp newto generate projects and.\BuildAndRun.ps1to validate the build. These are typical operations for a development-focused skill intended to automate environment setup and testing. - Indirect Prompt Injection Surface: The skill includes patterns for auditing local source code files, which creates a potential surface for indirect instructions.
- Evidence Chain:
- Ingestion points: The agent is instructed to read local C# files (
*.cs) using PowerShell'sSelect-Stringto identify namespace usage. - Boundary markers: No specific delimiters are used when the agent processes the content of these source files.
- Capability inventory: The skill utilizes PowerShell for file system navigation and string searching, along with the
winappCLI tool for project creation. - Sanitization: There is no explicit sanitization or filtering of the file content before it is processed by the search commands. While this is standard for audit tasks, it is a surface to be aware of when the agent interacts with external code.
Audit Metadata