dotnet-new-lib-slnx
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches .NET release information from Microsoft's official releases index, package metadata from NuGet's service index, and Docker image tags from Docker Hub. These operations target well-known services and are used to ensure the generated solution uses the latest stable and compatible versions of dependencies and tools.
- [EXTERNAL_DOWNLOADS]: A PowerShell script (
restore-missing-shared-assets.ps1) is provided to download missing template assets directly from the author's public GitHub repository. This mechanism is documented as a way to recover files that may be stripped by certain installation processes, ensuring the integrity of the generated scaffold. - [COMMAND_EXECUTION]: The skill instructions involve executing local scripts and standard development tools, including PowerShell for asset restoration and the .NET CLI (
dotnet build,dotnet test) for project validation. These commands are integral to the skill's primary purpose of code scaffolding and testing. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied configuration and external data from official APIs to interpolate values into project templates. While the skill ingests untrusted data, it follows a structured approach for scaffolding, and the ingestion points are primarily for generating source code and configuration files rather than influencing agent logic.
Audit Metadata