verification-loop
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard local development tools including
dotnet build,dotnet test,dotnet format, andgit diff. These operations are consistent with the skill's intended purpose of verifying project state and code quality within a local repository context.- [SAFE]: Phase 5 of the pipeline explicitly incorporates a security scan usingdotnet list package --vulnerableand includes instructions for the agent to check for hardcoded secrets and common OWASP vulnerabilities. This demonstrates a security-conscious design intended to reduce risk rather than introduce it.- [PROMPT_INJECTION]: While the skill processes untrusted data from the filesystem (viagit diffand diagnostic outputs), it establishes a rigorous, structured methodology that requires the agent to verify changes against specific intent and task descriptions (Phase 7). This structure provides a natural defense against indirect instructions embedded in code or comments.
Audit Metadata