lisp-to-dotnet
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill automates project scaffolding, compilation, and testing using
dotnetCLI and local PowerShell scripts. These operations are restricted to the migration project's directory. - [EXTERNAL_DOWNLOADS]: Interacts with official Autodesk Platform Services (APS) APIs and targets well-known NuGet packages (
AutoCAD.NET.Core). All external communications are directed at trusted vendor domains (autodesk.com). - [DATA_EXPOSURE]: Manages sensitive credentials (APS Client ID and Secret) through standard
.envfile practices. The skill includes explicit instructions and warnings to ensure secrets remain on the developer's local machine and are never shared in the chat context. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied AutoLISP (.lsp) files to generate C# code. While this constitutes an attack surface, the risk is mitigated by a structured analysis process (Discovery Table) and pattern-based mapping to strongly-typed .NET code.
- [COMMAND_EXECUTION]: Includes a destructive management script (
Reset-APSApp.ps1) that can delete cloud resources. This script is guarded by clear warnings and a mandatory manual confirmation prompt (Type DELETE to proceed).
Audit Metadata