nuget-manager

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the dotnet CLI to perform package management operations such as add, remove, restore, and package search. These are standard administrative tools for .NET development environments and are used within their intended scope for project dependency management.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of third-party packages from the NuGet registry. While this involves downloading external code, the skill targets a well-known service and includes mandatory steps for version verification before application.
  • [INDIRECT_PROMPT_INJECTION]: The skill handles package identifiers and version strings provided as input. 1. Ingestion points: Package names and version strings extracted from user requests in SKILL.md. 2. Boundary markers: Absent; inputs are interpolated into CLI commands. 3. Capability inventory: dotnet CLI with access to the filesystem and external network for package retrieval. 4. Sanitization: The workflow requires pre-installation verification using dotnet package search and post-installation validation via dotnet restore to mitigate the risk of installing incorrect or broken dependencies.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 12:31 PM