winmd-api-search
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [Local Utility Compilation]: The skill includes a C# project that is compiled locally during the setup phase to generate a metadata cache. This is a standard and transparent approach for processing platform-specific WinMD files efficiently.
- [Official Package Integration]: During cache generation, the .NET SDK is used to restore official Microsoft packages (such as the Windows App SDK) from the public NuGet registry. This ensures the skill has access to accurate and up-to-date API definitions.
- [System Metadata Access]: The tool reads public API metadata from the local Windows SDK installation. This access is limited to reading public type signatures and member details to provide the agent with technical reference information.
- [PowerShell Scripting]: Cache management and querying are implemented via PowerShell scripts. These scripts operate on local files within the workspace and standard system directories to manage the skill's data lifecycle.
Audit Metadata