winui-app
Pass
Audited by Gen Agent Trust Hub on Mar 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Automated System Configuration: The skill employs winget configure to prepare the development environment, which involves enabling Developer Mode and installing Visual Studio. These operations are performed using official Windows deployment tools to establish a standard development environment.
- Development Toolchain Integration: It uses the .NET CLI to scaffold, build, and run applications. This involves the execution of local development commands, which is necessary to verify the application's functionality.
- Indirect Input Surface: The skill ingests user-provided application names in SKILL.md which are then used in CLI commands. While no explicit boundary markers are used in the command template, the skill has the capability to execute subprocesses like dotnet new and winget configure. It includes a check to ensure the input is a safe folder name before use as a sanitization measure.
Audit Metadata