autor3search-csharp
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Installs the
Autor3Search.NET global tool from the public NuGet registry. This tool is provided by the skill author. - [COMMAND_EXECUTION]: The skill executes several shell commands, including
dotnet tool installand variousgitcommands (status,add,commit,reset). It also invokes the installedautor3search-csharputility for initialization, diagnostics, and benchmarking. - [INDIRECT_PROMPT_INJECTION]: The skill instructions mandate reading and following instructions from a repository file named
program.mdverbatim. This creates an attack surface where malicious instructions in the target repository could influence the agent's behavior. - Ingestion points: The file
program.mdlocated in the root of the repository being optimized. - Boundary markers: None; the skill is instructed to follow the file contents "exactly" without explicit sanitization or safety delimiters.
- Capability inventory: The agent has the capability to install software, execute shell commands, and modify the git history of the local repository.
- Sanitization: No sanitization or validation of the instructions within
program.mdis performed.
Audit Metadata