api-diff-validation
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Command Execution through Official Tooling: The skill utilizes
dnxto executedotnet-inspect. This is a standard method for inspecting .NET assemblies and is scoped to the official .NET engineering feeds. - External Data Verification: It uses the
gh(GitHub) command-line interface to search for and verify Pull Requests. This ensures that API changes are traceable to legitimate code modifications. - Input Data Processing: The skill processes project-specific files like
build-metadata.jsonandchanges.jsonto identify target build versions and candidate PRs. This is routine data ingestion for build validation tasks. - Indirect Prompt Injection Surface: As the skill processes data from GitHub PRs and external JSON files, there is a theoretical surface for indirect prompt injection if those sources contained malicious instructions. However, the scope of operation is restricted to specific validation commands, which limits potential impact.
Audit Metadata