shiny-maui-shell
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the creation of AI tools that interpret natural language to perform application navigation. This creates a surface where maliciously crafted user input could potentially trigger unintended navigation or parameter states.
- Ingestion points: Natural language queries processed by
AiMauiShellToolsas described inSKILL.md. - Boundary markers: The documentation does not specify explicit delimiters or "ignore embedded instructions" warnings for user-provided data within the generated AI prompts.
- Capability inventory: The skill grants the AI the ability to perform navigation (push, reset, back), update tab badges, and display dialogs via the
INavigatorservice (documented inSKILL.mdandreference/api-reference.md). - Sanitization: Implicit validation is provided by the source generator, which handles type conversion for route parameters (e.g., string to int, enum, Guid, or DateTime) as described in the generated
NavigateToRoutemethod inreference/api-reference.md. - [EXTERNAL_DOWNLOADS]: The skill references and facilitates the installation of the
Shiny.Maui.Shelllibrary and associated dependencies from the NuGet registry. - Evidence: Instructions to run
dotnet add package Shiny.Maui.Shelland links to GitHub repositories under theshinyorgorganization inSKILL.md. - Note: The resources originate from the skill's own vendor (shinyorg) or well-known and trusted entities such as Microsoft and the .NET Community Toolkit.
Audit Metadata