winapp-maui
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- Credential Management: The skill describes the use of PFX certificates and passwords for application signing. The provided examples demonstrate security best practices by using environment variables and secrets for credential storage in CI/CD environments rather than hardcoding sensitive values.
- External Resource Integration: The instructions reference established GitHub Actions for setting up the build environment. These resources are part of standard automated build workflows and originate from recognized sources.
- Manifest Processing Surface: The skill involves the manipulation of XML manifest files to resolve build-time placeholders. While processing external data is an identified pattern, the context here involves a developer's own local project files as part of the intended build process.
Audit Metadata