acad-dotnet

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPERSISTENCEDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent and user to execute several development-related commands, including dotnet build, dotnet restore, dotnet new install, and accoreconsole.exe. These are standard operations for scaffolding, compiling, and testing .NET plugins for Autodesk products.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the download of tools and templates from GitHub repositories associated with the author (autodesk-platform-services) and community contributors (MadhukarMoogala). It also references official Autodesk NuGet packages and SDK downloads, which are trusted sources for the intended development workflow.
  • [PERSISTENCE]: The skill documents standard methods for making AutoCAD plugins persist across sessions, such as placing .bundle folders in %APPDATA%\Autodesk\ApplicationPlugins\ or using the AutoCAD Startup Suite (APPLOAD). These are documented, functional requirements for the software being developed and are not used for malicious persistence.
  • [DYNAMIC_EXECUTION]: The skill is centered around building .NET DLLs and loading them into AutoCAD using the NETLOAD command or the /al flag in accoreconsole. This involves compiling C# code into executable binaries at runtime, which is the primary purpose of the skill.
  • [SAFE]: Instructions to modify AutoCAD security variables like SECURELOAD and TRUSTEDPATHS are explicitly framed as necessary for local development and testing. The skill provides clear guidance on the risks and appropriate usage of these settings.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 01:06 PM