autor3search-csharp

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Installs the Autor3Search .NET global tool from the public NuGet registry. This tool is provided by the skill author.
  • [COMMAND_EXECUTION]: The skill executes several shell commands, including dotnet tool install and various git commands (status, add, commit, reset). It also invokes the installed autor3search-csharp utility for initialization, diagnostics, and benchmarking.
  • [INDIRECT_PROMPT_INJECTION]: The skill instructions mandate reading and following instructions from a repository file named program.md verbatim. This creates an attack surface where malicious instructions in the target repository could influence the agent's behavior.
  • Ingestion points: The file program.md located in the root of the repository being optimized.
  • Boundary markers: None; the skill is instructed to follow the file contents "exactly" without explicit sanitization or safety delimiters.
  • Capability inventory: The agent has the capability to install software, execute shell commands, and modify the git history of the local repository.
  • Sanitization: No sanitization or validation of the instructions within program.md is performed.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 05:56 AM