agent-smith
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to use
dotnetCLI tools and a bundled PowerShell script (repair-roslyn-multiproject-artifacts.ps1) to perform code formatting, diagnostic remediation, and artifact repair. These commands are integral to the skill's stated purpose of maintaining engineering standards in .NET repositories. The instructions specifically advocate for non-mutating use of tools (--verify-no-changes) to ensure human oversight. - [EXTERNAL_DOWNLOADS]: References are limited to official Microsoft documentation for .NET tools and code analysis rules. There are no patterns of downloading or executing untrusted remote code.
- [DATA_EXFILTRATION]: Analysis of the skill's instructions and provided scripts shows no evidence of network exfiltration or unauthorized access to sensitive user data such as credentials or private keys.
- [SAFE]: The skill emphasizes evidence-based engineering, validation (builds and tests), and adherence to local repository conventions, aligning with secure development practices. It also promotes security best practices such as pinning GitHub Actions to commit SHAs and using least-privilege permissions.
Audit Metadata