dotnet-test

Pass

Audited by Gen Agent Trust Hub on Aug 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes dotnet CLI commands (msbuild, restore, build, test) and git commands through PowerShell scripts located in the scripts/ directory to automate code inspection and refactoring validation. These are standard operations for a developer tool.
  • [EXTERNAL_DOWNLOADS]: The scripts/resolve-test-package-versions.ps1 script connects to the official NuGet API (api.nuget.org) to fetch package metadata. The skill also invokes dotnet restore, which downloads dependencies from the NuGet registry. These interactions target a well-known and trusted service provider.
  • [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: The skill reads and parses project metadata (.csproj) and C# source code (.cs) from the target repository being refactored via scripts/inspect-dotnet-tests.ps1.
  • Boundary markers: No explicit delimiters or safety instructions are used when interpolating repository content into the agent's context.
  • Capability inventory: The skill has permissions to write to the file system (refactoring), execute shell commands (dotnet, git), and access the network (NuGet API).
  • Sanitization: The skill does not perform specific sanitization of ingested code, which is typical for development-oriented transformation tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 28, 2026, 08:09 PM
Security Audit — agent-trust-hub — dotnet-test