dotnet-upgrade
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill is a collection of instructional prompts for .NET modernization and does not include any scripts, commands, or external dependencies.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect injection surface as it instructs the agent to process external files like .csproj and YAML build definitions. 1. Ingestion points: Solution files, project configurations, and build definitions (SKILL.md). 2. Boundary markers: No explicit delimiters are provided. 3. Capability inventory: Limited to generating analysis, checklists, and refactoring suggestions. 4. Sanitization: No sanitization is specified. This surface is inherent to the skill's purpose and contains no malicious directives.
Audit Metadata