dotnet-core-expert
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill instructions and reference materials promote high-security standards, such as using PBKDF2 with high iteration counts for password hashing and implementing proper JWT validation with lifetime checks.
- [COMMAND_EXECUTION]: The workflow involves standard .NET CLI commands (
dotnet build,dotnet test) and testing tools likecurlfor development purposes, which are routine and non-malicious. - [EXTERNAL_DOWNLOADS]: Docker and Kubernetes configurations reference official, well-known images from Microsoft (
mcr.microsoft.com/dotnet/sdk,mcr.microsoft.com/dotnet/aspnet) and the official Redis Alpine image, representing safe infrastructure dependencies. - [INDIRECT_PROMPT_INJECTION]: The skill processes user requirements to generate application logic. This attack surface is addressed through mandatory constraints that require input validation and the use of DTOs to prevent direct entity exposure.
Audit Metadata