shiny-maui-shell

Pass

Audited by Gen Agent Trust Hub on Sep 10, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the creation of AI tools that interpret natural language to perform application navigation. This creates a surface where maliciously crafted user input could potentially trigger unintended navigation or parameter states.
  • Ingestion points: Natural language queries processed by AiMauiShellTools as described in SKILL.md.
  • Boundary markers: The documentation does not specify explicit delimiters or "ignore embedded instructions" warnings for user-provided data within the generated AI prompts.
  • Capability inventory: The skill grants the AI the ability to perform navigation (push, reset, back), update tab badges, and display dialogs via the INavigator service (documented in SKILL.md and reference/api-reference.md).
  • Sanitization: Implicit validation is provided by the source generator, which handles type conversion for route parameters (e.g., string to int, enum, Guid, or DateTime) as described in the generated NavigateToRoute method in reference/api-reference.md.
  • [EXTERNAL_DOWNLOADS]: The skill references and facilitates the installation of the Shiny.Maui.Shell library and associated dependencies from the NuGet registry.
  • Evidence: Instructions to run dotnet add package Shiny.Maui.Shell and links to GitHub repositories under the shinyorg organization in SKILL.md.
  • Note: The resources originate from the skill's own vendor (shinyorg) or well-known and trusted entities such as Microsoft and the .NET Community Toolkit.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 10, 2026, 11:41 PM
Security Audit — agent-trust-hub — shiny-maui-shell