Security risk report for @forgecat/openai_skills_winui-app v0.0.11
Source Integrity
Low
The profile is sourced from the official OpenAI skills repository (https://github.com/openai/skills) with a documented commit hash and Apache-2.0 license.
All external references point to legitimate Microsoft Learn documentation, official WinUI Gallery, and Windows App SDK samples—no typosquatted or attacker-controlled dependencies.
Agent Intent
Low
The content is purely instructional guidance for WinUI 3 development workflows—no directives to ignore instructions, read credentials, exfiltrate data, or hide its own content.
References to external URLs (Microsoft Learn, GitHub repos) are legitimate canonical sources for platform documentation, not malicious fetch instructions.
No guidance plants malicious knowledge, typosquatted packages, or security-weakening defaults; all recommendations favor official Microsoft tooling and standard WinUI patterns.
Details
Evidence
Profile description: 'Bootstrap, develop, and design modern WinUI 3 desktop applications with C# and the Windows App SDK using official Microsoft guidance...'
SKILL.md step 2: 'Prefer Microsoft Learn for requirements, API expectations, and platform guidance.'
References consistently point to https://learn.microsoft.com and official GitHub repos (microsoft/WinUI-Gallery, microsoft/WindowsAppSDK-Samples, CommunityToolkit/Windows).
Permissions
Low
No tools or MCP servers are declared in this profile; it is purely markdown documentation and reference guidance.
The profile instructs the AI to run legitimate development commands (dotnet, winget, Visual Studio) only within the user's explicit workflow and with user confirmation for machine-changing operations.
Authority is scoped to WinUI development tasks and does not request shell access, file mutation, or network operations beyond fetching official documentation.
Details
Evidence
No 'tools' or 'mcp_servers' sections in the profile.
SKILL.md step 2: 'For diagnostics-only environment requests, explain that the bundled bootstrap may change the machine and get confirmation before running it.'
All external references are read-only documentation fetches from trusted Microsoft and GitHub sources.
MCP Risk
Low
No MCP servers are defined in this profile.
The profile contains no hidden instructions in tool descriptions, no arbitrary binary execution directives, and no unrestricted network or filesystem access requests.
Details
Evidence
Profile metadata shows 'Dependencies: None' and no MCP server definitions in any file.
ForgeCat