maui-hot-reload-diagnostics

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides a diagnostic shell script (scripts/diagnose-hot-reload.sh) and standalone commands (e.g., file, find, dotnet) to gather system information and project metadata. It also includes a sed command to add the UTF-8 Byte Order Mark (BOM) to source files for compatibility with Hot Reload.
  • [DATA_EXFILTRATION]: The diagnostic script accesses local environment variables using env. It filters for hot-reload related variables (e.g., Microsoft_CodeAnalysis_EditAndContinue_LogDir), but this capability involves reading the environment state for troubleshooting purposes.
  • [INDIRECT_PROMPT_INJECTION]: The skill analyzes content from project files (.cs, .csproj), creating a surface for indirect instructions.
  • Ingestion points: scripts/diagnose-hot-reload.sh reads various project files using grep and find in the current directory and src subdirectory.
  • Boundary markers: Not used; the skill does not explicitly delimit file content to prevent instruction confusion.
  • Capability inventory: Shell command execution, file reading, and file modification (via sed).
  • Sanitization: No sanitization is applied to the content extracted from the user's project files during analysis.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 09:37 PM