windows-ui-automation

Malicious tool definition detected

Tool: SKILL.md [1/3] Description: --- name: windows-ui-automation risk_level: HIGH description: "Expert in Windows UI Automation (UIA) and Win32 APIs for desktop automation.

Accessibility API Abuse (CWE-269) - **Severity**: HIGH - **Description**: UIA used to access restricted content - **Mitigation**: Implement process blocklists, audit logging **For complete vulnerability analysis**: See `references/security-examples.md` ### 5.2 OWASP Top 10 2025 Mapping | OWASP ID | Category | Risk for UIA | Mitigation | |----------|----------|--------------|------------| | A01:2025 | Broken Access Control | CRITICAL | Process validation, permission tiers | | A02:2025 | Security

Tool: SKILL.md [3/3] Description: - [ ] Audit logs properly configured - [ ] Performance targets met (element lookup <100ms) --- ## 14.

Malicious tool definition detected

Tool: references/advanced-patterns.md Description: # Windows UI Automation - Advanced Patterns ## Pattern: Secure Automation Session ```python from contextlib import contextmanager import uuid class SecureAutomationSession: """Managed automation session with full security controls.""" def __init__(self, permission_tier: str = 'read-only'): self.session_id = str(uuid.uuid4()) self.permission_tier = permission_tier self.uia = None self.audit_logger = UIAuditLogger() self.timeout_manager = TimeoutM

Malicious tool definition detected

Tool: references/security-examples.md Description: # Windows UI Automation - Security Examples ## 5.1 Domain-Specific Vulnerability Landscape (2022-2025) **Research Date**: 2025-01-15 ### Vulnerability 1: CVE-2023-28218 - UI Automation Privilege Escalation **Severity**: HIGH (CVSS 7.8) **CWE**: CWE-269 (Improper Privilege Management) **Description**: Windows UI Automation framework allows lower-privileged processes to interact with higher-privileged windows through UIA patterns, enabling privile

Malicious tool definition detected

Tool: references/threat-model.md Description: # Windows UI Automation - Threat Model ## Threat Model Overview **Domain Risk Level**: HIGH **Attack Surface**: System-wide window access, input injection, process interaction ### Assets to Protect 1. **User Credentials** - Sensitivity: CRITICAL - Passwords, tokens, API keys visible in application windows 2.