dotnet-init

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute standard dotnet CLI commands, such as dotnet new, dotnet build, and solution management commands. These are used for their intended purpose of project scaffolding and verification.
  • [INDIRECT_PROMPT_INJECTION]: The skill analyzes existing project files, which constitutes a potential surface for indirect prompt injection if those files contain malicious instructions.
  • Ingestion points: The skill reads project metadata from .sln, .csproj, appsettings, and existing CLAUDE.md files (Step 1 and Step 4).
  • Boundary markers: There are no explicit instructions to the agent to ignore or delimit instructions found within the ingested project files.
  • Capability inventory: The agent has the capability to execute shell commands (dotnet CLI) and perform file system writes (CLAUDE.md generation and backups).
  • Sanitization: The skill does not define specific sanitization or validation logic for the content read from the existing codebase.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 03:50 PM
Security Audit — agent-trust-hub — dotnet-init