dotnet-maui-development
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill follows secure coding practices for .NET MAUI, such as recommending compiled bindings (
x:DataType) and using source generators from the reputable Microsoft Community Toolkit to handle boilerplate code. - [INDIRECT_PROMPT_INJECTION]: The skill describes an architecture for ingesting data from external APIs through
HttpClientand displaying it via data binding. While these are potential ingestion points for indirect prompt injection, the skill utilizes standard .NET patterns and does not introduce specific vulnerabilities. - Ingestion points: In
ProductListViewModel.cs, external data enters the context through_productService.GetProductsAsync(ct)and_productService.SearchAsync(SearchTerm, ct). - Boundary markers: Not explicitly defined in UI templates, which is standard for XAML development.
- Capability inventory: The skill demonstrates capabilities for network requests (
HttpClient) and navigation via Shell URI routes (GoToAsync). - Sanitization: Standard data binding is used; specific input sanitization for external content is not explicitly shown in these basic examples.
- [EXTERNAL_DOWNLOADS]: The skill references the installation of the official .NET MAUI workload (
dotnet workload install maui) and dependencies from the Microsoft Community Toolkit. These are well-known and trusted resources within the .NET ecosystem.
Audit Metadata