neo-dotnet

Pass

Audited by Gen Agent Trust Hub on Jun 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches dependencies and tools from the official NuGet package registry using dotnet add package and dotnet tool restore commands.
  • [COMMAND_EXECUTION]: Executes .NET CLI commands including dotnet build, dotnet run, and dotnet test to manage the application lifecycle and validate the environment.
  • [PROMPT_INJECTION]: The skill ingests data from .sln and .csproj files to determine project architecture, creating a surface for indirect prompt injection.
  • Ingestion points: Project configuration files (.sln, .csproj) described in the skill metadata and overview.
  • Boundary markers: No explicit markers are defined to isolate untrusted data in project files from agent instructions.
  • Capability inventory: Shell execution of dotnet CLI commands including build, run, test, and package management.
  • Sanitization: No validation or filtering of project file content is specified before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 15, 2026, 01:35 AM
Security Audit — agent-trust-hub — neo-dotnet