dotnet-new-app-slnx
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches .NET release metadata from Microsoft's official GitHub repository to determine the latest supported framework versions.
- [EXTERNAL_DOWNLOADS]: The skill uses a PowerShell script to download missing shared assets (e.g., configuration files, dotfiles) directly from the author's official GitHub repository (
codebeltnet/agentic) if they are absent from the local installation. - [COMMAND_EXECUTION]: The skill executes local PowerShell scripts (
resolve-package-versions.ps1andrestore-missing-shared-assets.ps1) to resolve NuGet package versions via official NuGet APIs and to ensure the integrity of the scaffold assets. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user input for parameters such as solution name and root namespace. These values are interpolated into the scaffolded file templates. The skill includes basic validation for the target framework parameter within its helper scripts.
Audit Metadata