agent-smith
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines a rigorous software craftsmanship standard and provides specific guidance for .NET development. All instructions focus on engineering quality, evidence-based decision-making, and repository consistency.
- [COMMAND_EXECUTION]: The skill utilizes 'dotnet format' and a bundled PowerShell script ('repair-roslyn-multiproject-artifacts.ps1') to maintain code quality. These operations are scoped to the project environment and are standard for the described engineering tasks. The script is designed with dry-run capabilities and safety checks to prevent unintended code changes.
- [PROMPT_INJECTION]: The skill processes repository source code and configuration files, which presents a surface for indirect prompt injection. However, this is mitigated by explicit instructions to validate findings against official documentation, use evidence over confidence, and perform human-in-the-loop reviews of all changes.
- [DATA_EXPOSURE]: No hardcoded credentials or sensitive file paths were detected. The skill instructions specifically advocate for secure defaults, managed secret stores, and environment-specific configuration, aligning with security best practices.
Audit Metadata