de-sloppify
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard .NET development commands including
dotnet format,dotnet build, anddotnet test, along withgrepfor pattern matching. These tools are used appropriately for code formatting and analysis within the local project context. - [INDIRECT_PROMPT_INJECTION]: The pipeline ingests source code and comments for analysis, which serves as a theoretical attack surface for instructions embedded in data. However, the risk is addressed through manual oversight and automated verification steps. 1. Ingestion points: Solution source code files processed by
grepinreferences/cleanup-steps.mdand MCP tools for diagnostic gathering. 2. Boundary markers: Not explicitly defined for external code content. 3. Capability inventory: Includes the ability to write to the filesystem viadotnet formatand manipulate the repository state throughgit commit. 4. Sanitization: The process relies ondotnet buildanddotnet testas validation gates rather than input sanitization.
Audit Metadata