dnspy
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and provides instructions for downloading well-known, open-source security tools (dnSpyEx, de4dot, and ilspycmd) from their official GitHub repositories.
- [COMMAND_EXECUTION]: Provides benign command-line examples for verifying file headers using Python and running deobfuscation tools on local samples.
- [DYNAMIC_EXECUTION]: Includes an educational C# code snippet that demonstrates how to use .NET Reflection to manually invoke deobfuscation routines found within an assembly during analysis.
- [INDIRECT_PROMPT_INJECTION]: Since the skill's purpose is to analyze untrusted .NET assemblies, there is an inherent surface for indirect prompt injection if an agent were to interpret decompiled strings as instructions. However, the skill provides a defensive framework for human-in-the-loop or structured analysis.
Audit Metadata