winapp-find-ui
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- External Data Retrieval: The skill is designed to fetch and cache UI control data from established public repositories (e.g., GitHub). This is a documented feature used by the
winapputility to provide up-to-date code snippets and documentation for UI components. - Command Execution: The skill operates by executing the
winappcommand-line tool to perform searches and retrieve structured data. These operations are essential for its primary function of assisting in Windows application development. - Indirect Prompt Injection Surface: The tool processes external code samples as part of its search results. The skill addresses potential considerations by mechanically cleaning these snippets and providing clear instructions for manual review and integration (such as wiring up event handlers), which helps maintain developer oversight of the resulting code.
Audit Metadata