outdated
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
dotnetCLI, a well-known development tool, to audit project dependencies. This behavior is expected and consistent with the skill's stated purpose.- [INDIRECT_PROMPT_INJECTION]: The skill inventories project dependencies by readingcsprojandDirectory.Packages.propsfiles. This constitutes an ingestion point for external data; however, the skill uses this data for reporting and does not exhibit unsafe interpolation. Ingestion points: Project files retrieved via theget_nuget_packagesMCP tool; Boundary markers: None; Capability inventory:dotnet list,dotnet build, andget_diagnosticsMCP tool; Sanitization: Not explicitly implemented within the skill instructions.
Audit Metadata