cdata-cli-adonet

Pass

Audited by Gen Agent Trust Hub on Jul 21, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute the dotnet CLI to add packages and run a licensing tool (install-license.dll) located within the NuGet package's tools directory. The tool is executed via dotnet ./install-license.dll and accepts piped input for automated activation.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the download of libraries (CData.<Source>) from the NuGet package registry. These are vendor-owned resources corresponding to the skill author, CData Software.
  • [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it handles untrusted data during application development.
  • Ingestion points: Connection strings retrieved from appsettings.json or environment variables, and user-provided search terms in C# code examples.
  • Boundary markers: The skill does not define specific boundary markers or delimiters for the agent to use when processing these external configurations.
  • Capability inventory: The skill utilizes dotnet commands for package management and license activation.
  • Sanitization: The instructions explicitly recommend using parameterized queries (e.g., SalesforceParameter) to mitigate SQL injection risks in the target application.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 21, 2026, 05:29 PM
Security Audit — agent-trust-hub — cdata-cli-adonet