dotnet-init
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard
dotnetCLI commands, such asdotnet new,dotnet build, and solution management commands. These are used for their intended purpose of project scaffolding and verification. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes existing project files, which constitutes a potential surface for indirect prompt injection if those files contain malicious instructions.
- Ingestion points: The skill reads project metadata from
.sln,.csproj,appsettings, and existingCLAUDE.mdfiles (Step 1 and Step 4). - Boundary markers: There are no explicit instructions to the agent to ignore or delimit instructions found within the ingested project files.
- Capability inventory: The agent has the capability to execute shell commands (
dotnetCLI) and perform file system writes (CLAUDE.mdgeneration and backups). - Sanitization: The skill does not define specific sanitization or validation logic for the content read from the existing codebase.
Audit Metadata