minimal-api
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains architectural guidance and code snippets for .NET 10 development that follow industry best practices for Minimal APIs.
- [DYNAMIC_EXECUTION]: The skill includes a pattern for automated endpoint discovery using C# reflection (
Activator.CreateInstance) to scan the current assembly for classes implementingIEndpointGroup. This is a standard and secure implementation of the Service Locator or Plugin pattern for modular application configuration. - [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface for indirect prompt injection by facilitating the ingestion of external data via HTTP request parameters and bodies. However, it mitigates this risk by recommending the use of validation filters (e.g., FluentValidation) to sanitize and validate all incoming data before it reaches application logic.
Audit Metadata