dotnet-test
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
dotnetCLI commands (msbuild, restore, build, test) andgitcommands through PowerShell scripts located in thescripts/directory to automate code inspection and refactoring validation. These are standard operations for a developer tool. - [EXTERNAL_DOWNLOADS]: The
scripts/resolve-test-package-versions.ps1script connects to the official NuGet API (api.nuget.org) to fetch package metadata. The skill also invokesdotnet restore, which downloads dependencies from the NuGet registry. These interactions target a well-known and trusted service provider. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill reads and parses project metadata (
.csproj) and C# source code (.cs) from the target repository being refactored viascripts/inspect-dotnet-tests.ps1. - Boundary markers: No explicit delimiters or safety instructions are used when interpolating repository content into the agent's context.
- Capability inventory: The skill has permissions to write to the file system (refactoring), execute shell commands (
dotnet,git), and access the network (NuGet API). - Sanitization: The skill does not perform specific sanitization of ingested code, which is typical for development-oriented transformation tools.
Audit Metadata