dotnet-change-impact
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local
gitcommands such asgit rev-parse,git log, andgit diffto analyze repository metadata and code changes. These are read-only operations designed to facilitate .NET compatibility analysis and do not modify repository state. - [PROMPT_INJECTION]: The skill is subject to indirect prompt injection risks because it ingests untrusted data from Git commit messages and diffs without employing specific boundary markers or sanitization logic.
- Ingestion points: Local repository data retrieved via
git logandgit diff, as well as user-provided change descriptions processed inSKILL.md. - Boundary markers: No delimiters or "ignore instructions" warnings are utilized when interpolating external commit data into the agent context.
- Capability inventory: Execution of local
gitsubprocesses. - Sanitization: No validation or filtering is performed on the content of commit messages or diffs before processing.
- [EXTERNAL_DOWNLOADS]: Refers to official Microsoft .NET compatibility guidelines and library change rules. These references target a well-known service and do not involve the download or execution of remote scripts or packages.
Audit Metadata