What HTML is processed?
That's not a browser window, and the tool used to write the Windows Skype GUI has controls that allow *some* HTML to be used in labels like that. AFAIK it isn't a full HTML processor, thereby I guess it doesn't process Javascript. Maybe hyperlinks are supported, maybe not. Can the reseacher demonstrate it? He showed the vulnerability, and given the context a proof of concept is not difficult to show.