dotnet-docfx-digest
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONREMOTE_CODE_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill has a vulnerability surface where it ingests untrusted data from external sources via
gh search codeto find usage examples. This external content is processed by the agent and could potentially contain malicious instructions intended to influence the agent's output or actions.\n - Ingestion points: External code search results via the GitHub CLI.\n
- Boundary markers: Uses DocFX-specific Markdown front matter and code fences to delimit content.\n
- Capability inventory: Access to
dotnet run,dotnet build,gh,git, and local file system operations.\n - Sanitization: All code samples are required to pass a compilation gate (
SAMPLE_COMPILE_FAILED), which validates the syntax but does not prevent logic-based prompt injection.\n- [REMOTE_CODE_EXECUTION]: The skill facilitates the execution of local C# scripts (docfx.csandagents.cs) through thedotnet run --filecommand. These scripts are provided as part of the skill to handle core documentation logic and repository maintenance.\n- [DYNAMIC_EXECUTION]: The skill performs runtime compilation of C# code blocks extracted from documentation files to verify their validity. It dynamically generates temporary project files and executes them using the .NET build system.
Audit Metadata