The Agent Skills Directory

[Command Execution]: The skill employs the winapp and dotnet command-line interfaces for project scaffolding, API discovery, and building the application. While shell command execution is a security consideration, these commands are restricted to standard development tasks and the project's own directory.
[External Downloads]: The winapp new command supports fetching project templates from remote sources. Although external downloads can introduce third-party code, these templates are part of the migration toolchain used to initialize the new application structure.
[Indirect Prompt Injection Surface]: The migration workflow involves reading local source code files to inventory namespaces and control usage. Processing user-controlled files is a potential injection surface, but it is necessary here for performing static analysis of the migration targets.
Ingestion points: Local C# (.cs) and XAML (.xaml) files are processed in SKILL.md to identify WPF components.
Boundary markers: No specific delimiters or "ignore" instructions are used during the audit phase.
Capability inventory: The skill uses winapp and dotnet tools for project creation and building, as well as Select-String for searching files.
Sanitization: The skill performs targeted searches for specific namespace patterns (e.g., System.Windows) to build its inventory.

winui-wpf-migration