dotnet-maui-testing
Fail
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: HIGHCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [CREDENTIALS_UNSAFE]: The file
SKILL.mdcontains a hardcoded password stringP@ssw0rd!in the test code snippet. Hardcoding secret values in code is a dangerous practice that exposes credentials. - [INDIRECT_PROMPT_INJECTION]: The skill implements UI testing patterns that ingest untrusted data from an application's interface.
- Ingestion points: The test methods in
SKILL.mdread element content viahomeTitle.TextanderrorLabel.Text. - Boundary markers: No boundary markers or 'ignore' instructions are used to delimit untrusted application data.
- Capability inventory: The skill utilizes shell command execution for tool installation and test execution as documented in
SKILL.md. - Sanitization: The content retrieved from the application UI is not sanitized or validated before being used in assertions.
- [EXTERNAL_DOWNLOADS]: The skill instructions include the installation of external tools and packages.
- Fetches the Appium server and XHarness CLI from official registries.
- Uses unpinned versions for dependencies like
Appium.WebDriverandMicrosoft.DotNet.XHarness.TestRunners.Xunit, which can lead to unpredictable behavior if upstream packages are updated or compromised.
Recommendations
- AI detected serious security threats
Audit Metadata