The Agent Skills Directory

[DATA_EXPOSURE]: The skill mentions sensitive file paths such as ~/.microsoft/usersecrets/ and /run/secrets/ within its documentation. However, these references are strictly educational, explaining how the .NET framework handles configuration and secrets. The instructions explicitly advise against hard-coding credentials and emphasize secure secret management practices.
[INDIRECT_PROMPT_INJECTION]: The skill identifies project metadata files (.csproj, Directory.Build.props, global.json) as data ingestion points for determining the target framework version. While these are technically untrusted inputs, the skill uses them for benign version resolution logic and does not combine this ingestion with high-risk capabilities like arbitrary command execution or network exfiltration.
[COMMAND_EXECUTION]: The documentation mentions standard .NET CLI commands such as dotnet user-secrets and dotnet --list-sdks for project management and environment diagnostics. These are common development tools and are used here within their intended operational scope.

dotnet-fundamentals