dotnet-segregated-assets
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill executes a bundled C# script (scripts/segregate-assets.cs) via
dotnet runto provide deterministic analysis and verification of the target project's topology.\n- [EXTERNAL_DOWNLOADS]: The C# runner performs network requests to the NuGet V3 service index (https://api.nuget.org/v3/index.json) to resolve package versions. The skill also references external base images from dhi.io in its generated Dockerfile templates.\n- [COMMAND_EXECUTION]: The skill invokes local command-line tools includinggitto verify repository tracking anddotnet publishto validate that static assets are correctly excluded from the application artifact.\n- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection by ingesting untrusted project data during its inspection phase.\n - Ingestion points: The C# script reads various project files including .csproj, .cs, .cshtml, .razor, and appsettings.json to discover configurations and asset references.\n
- Boundary markers: The script does not utilize explicit boundary markers or instructions to ignore embedded content, though it uses regex-based parsing rather than direct evaluation.\n
- Capability inventory: The runner can execute local commands (git, dotnet) and access the project's file system.\n
- Sanitization: Input project files are processed through pattern matching and are not directly interpreted as executable instructions by the agent.
Audit Metadata