dotnet-remote-testing
Warn
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: MEDIUMPROMPT_INJECTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill contains instructions that explicitly override standard AI agent interaction protocols to force autonomous behavior.
- Evidence: The 'Do this now' and 'Forbidden as a first response' sections command the agent to execute shell commands immediately upon invocation without offering a menu or asking for confirmation.
- Evidence: 'If you are about to write "What would you like me to do?", you have already failed — run the command instead.'
- [INDIRECT_PROMPT_INJECTION]: The skill has a significant attack surface by ingesting and processing untrusted data from the repository being tested.
- Ingestion points: The skill reads 'testenvironments.json' configuration files, project files (.csproj, .slnx), test source code, and .git metadata from the user's workspace.
- Boundary markers: No explicit boundary markers or instructions are identified to prevent the agent from interpreting embedded instructions within test code or configuration fields.
- Capability inventory: Shell command execution via 'dotnet run', Docker operations (build, run, pull), and network access for metadata retrieval.
- Sanitization: There is no evidence of input validation for fields read from external configuration files before they are used in command-line arguments.
- [REMOTE_CODE_EXECUTION]: The skill executes code provided in the repository and a bundled C# script at runtime.
- Evidence: Use of 'dotnet run --file "/scripts/remote-test.cs"' to execute the runner logic.
- Evidence: Execution of 'dotnet test' inside a Docker container, which runs arbitrary code defined in the repository's test suite.
- [EXTERNAL_DOWNLOADS]: The skill fetches resources from external locations at runtime.
- Evidence: Downloads configuration from Microsoft's .NET release index on GitHub (raw.githubusercontent.com/dotnet/core/...).
- Evidence: Pulls Docker images from 'mcr.microsoft.com' and the author's repository 'codebeltnet/ubuntu-testrunner'.
- [DYNAMIC_EXECUTION]: The skill uses 'dotnet run --file' to compile and execute a C# script ('remote-test.cs') included with the skill, which creates a dynamic execution path for orchestration logic.
Audit Metadata