The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the user to download and install WinAppDriver from Microsoft's official GitHub repository. It also utilizes well-known package managers (NPM, Chocolatey) for dependency management.
Evidence: https://github.com/microsoft/WinAppDriver referenced in SKILL.md for installer downloads.
[COMMAND_EXECUTION]: The skill documentation includes commands for starting services and installing drivers via shell execution.
Evidence: Use of Start-Process and choco install within CI configuration examples in references/locators-and-ci.md.
[PRIVILEGE_ESCALATION]: The skill provides instructions to modify the Windows Registry to enable Developer Mode, which requires administrative privileges.
Evidence: reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock" used in GitHub Actions workflows within references/gestures-hooks-and-ci.md.
[DYNAMIC_EXECUTION]: The skill utilizes Appium's prerun and postrun capabilities, which allow the execution of arbitrary PowerShell scripts during the test session lifecycle.
Evidence: Example script Copy-Item .\\fixtures\\config.json $env:APPDATA\\MyApp\\config.json -Force defined in session capabilities in references/gestures-hooks-and-ci.md.
[INDIRECT_PROMPT_INJECTION]: The skill establishes an interaction surface with the Windows UI Automation (UIA) tree, which involves ingesting element properties (Names, IDs) from applications under test. If these applications display untrusted content, it represents a potential injection surface.
Ingestion points: Windows UIA element attributes (AutomationId, Name) accessed via FindElement methods (defined in SKILL.md).
Boundary markers: None identified for UIA data ingestion.
Capability inventory: PowerShell execution (appium:prerun), registry modification (reg add), and file system operations (Copy-Item) are documented (defined in references/gestures-hooks-and-ci.md).
Sanitization: No specific sanitization or validation of UIA element content is described.

winappdriver