dotnet-backend
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for processing untrusted user data through API endpoints.
- Ingestion points: Data received via
CreateUserRequestandCreateUserDtoin the Minimal API and Controller examples inSKILL.md. - Boundary markers: The skill explicitly instructs the agent to use "Model validation," "FluentValidation," and manual checks (e.g., checking if the email is empty) to validate inputs.
- Capability inventory: The skill uses Entity Framework Core to perform database writes (
db.SaveChangesAsync()). - Sanitization: The implementation uses
BCrypt.Netfor hashing passwords before they are stored in the database. - [SAFE]: The skill follows security best practices for credential and configuration management.
- It uses
IConfigurationfor retrieving settings and explicitly recommends "User Secrets" for local development to avoid hardcoding credentials in source code.
Audit Metadata