outdated

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the dotnet CLI, a well-known development tool, to audit project dependencies. This behavior is expected and consistent with the skill's stated purpose.- [INDIRECT_PROMPT_INJECTION]: The skill inventories project dependencies by reading csproj and Directory.Packages.props files. This constitutes an ingestion point for external data; however, the skill uses this data for reporting and does not exhibit unsafe interpolation. Ingestion points: Project files retrieved via the get_nuget_packages MCP tool; Boundary markers: None; Capability inventory: dotnet list, dotnet build, and get_diagnostics MCP tool; Sanitization: Not explicitly implemented within the skill instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 03:52 PM
Security Audit — agent-trust-hub — outdated