dependency-injection
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains purely instructional content and code snippets for C# and .NET dependency injection patterns.
- [REMOTE_CODE_EXECUTION]: No remote code execution patterns were detected. The skill references standard .NET library usage (e.g., Microsoft.Extensions.DependencyInjection) and the well-known open-source library Scrutor for assembly scanning.
- [DATA_EXFILTRATION]: No data exfiltration or unauthorized network operations were detected. Mention of configuration binding (JwtOptions) follows standard secure practices for handling settings via the Options pattern.
- [DYNAMIC_EXECUTION]: The use of
ActivatorUtilities.CreateInstanceand Scrutor'sScanmethod are standard features of the .NET dependency injection container used for service resolution and registration by convention, and do not involve executing untrusted input as code. - [COMMAND_EXECUTION]: The skill mentions a tool
get_di_registrationsfor auditing dependency lifetimes. This is presented as an internal agent capability for project analysis and does not involve arbitrary command execution.
Audit Metadata