cdata-cli-adonet
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute the
dotnetCLI to add packages and run a licensing tool (install-license.dll) located within the NuGet package's tools directory. The tool is executed viadotnet ./install-license.dlland accepts piped input for automated activation. - [EXTERNAL_DOWNLOADS]: The skill facilitates the download of libraries (
CData.<Source>) from the NuGet package registry. These are vendor-owned resources corresponding to the skill author, CData Software. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it handles untrusted data during application development.
- Ingestion points: Connection strings retrieved from
appsettings.jsonor environment variables, and user-provided search terms in C# code examples. - Boundary markers: The skill does not define specific boundary markers or delimiters for the agent to use when processing these external configurations.
- Capability inventory: The skill utilizes
dotnetcommands for package management and license activation. - Sanitization: The instructions explicitly recommend using parameterized queries (e.g.,
SalesforceParameter) to mitigate SQL injection risks in the target application.
Audit Metadata