ilspy-decompile
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Uses the
dnxutility to runilspycmdfor decompiling .NET assemblies into C# or IL code.\n- [INDIRECT_PROMPT_INJECTION]: The skill reads binary .dll files and presents the decompiled source to the agent, creating a risk of indirect prompt injection if the binaries are maliciously crafted.\n - Ingestion points: .NET assembly files (.dll) from local project paths, NuGet caches, and system runtime directories.\n
- Boundary markers: Absent. No instructions are provided to the agent to treat the decompiled output as untrusted content.\n
- Capability inventory: Execution of shell commands via the Bash tool to run the decompiler.\n
- Sanitization: Absent. The skill does not filter or sanitize the decompiled code before it enters the agent's context.
Audit Metadata