agent-smith

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill defines a rigorous software craftsmanship standard and provides specific guidance for .NET development. All instructions focus on engineering quality, evidence-based decision-making, and repository consistency.
  • [COMMAND_EXECUTION]: The skill utilizes 'dotnet format' and a bundled PowerShell script ('repair-roslyn-multiproject-artifacts.ps1') to maintain code quality. These operations are scoped to the project environment and are standard for the described engineering tasks. The script is designed with dry-run capabilities and safety checks to prevent unintended code changes.
  • [PROMPT_INJECTION]: The skill processes repository source code and configuration files, which presents a surface for indirect prompt injection. However, this is mitigated by explicit instructions to validate findings against official documentation, use evidence over confidence, and perform human-in-the-loop reviews of all changes.
  • [DATA_EXPOSURE]: No hardcoded credentials or sensitive file paths were detected. The skill instructions specifically advocate for secure defaults, managed secret stores, and environment-specific configuration, aligning with security best practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 03:02 PM
Security Audit — agent-trust-hub — agent-smith