nuget-manager
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
dotnetCLI to perform package management operations such asadd,remove,restore, andpackage search. These are standard administrative tools for .NET development environments and are used within their intended scope for project dependency management. - [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of third-party packages from the NuGet registry. While this involves downloading external code, the skill targets a well-known service and includes mandatory steps for version verification before application.
- [INDIRECT_PROMPT_INJECTION]: The skill handles package identifiers and version strings provided as input. 1. Ingestion points: Package names and version strings extracted from user requests in SKILL.md. 2. Boundary markers: Absent; inputs are interpolated into CLI commands. 3. Capability inventory:
dotnetCLI with access to the filesystem and external network for package retrieval. 4. Sanitization: The workflow requires pre-installation verification usingdotnet package searchand post-installation validation viadotnet restoreto mitigate the risk of installing incorrect or broken dependencies.
Audit Metadata