error-consolidation-merge-existing

Pass

Audited by Gen Agent Trust Hub on Aug 24, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • Script Execution: The skill directs the agent to execute a local PowerShell script (create-redirect-entry.ps1) located within the repository's .github/skills directory. This script is used to automate the update of the .openpublishing.redirection.csharp.json file, ensuring link integrity after articles are merged.
  • File System Operations: The skill performs destructive operations, specifically deleting source Markdown files after their content has been successfully migrated to the destination article. It also modifies the toc.yml and destination Markdown files to reflect the new structure. These actions are fundamental to the consolidation process.
  • Metadata Extraction from Source Code: To ensure accuracy, the skill instructs the agent to read diagnostic constants and verbatim messages from repository files such as ErrorCode.cs and CSharpResources.resx. This integration ensures that documentation remains synchronized with the underlying compiler resources.
  • Indirect Prompt Injection Surface: The skill processes content from existing Markdown articles to be merged.
  • Ingestion points: Content is read from user-approved source files in the docs/csharp/language-reference/compiler-messages/ directory.
  • Boundary markers: The skill does not explicitly define delimiters to separate source content from agent instructions, though it requires the agent to adapt the content as a section.
  • Capability inventory: The agent has the ability to execute a PowerShell script, delete files, and update TOC configuration files.
  • Sanitization: There are no explicit sanitization or filtering steps for the content extracted from source articles.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 24, 2026, 12:50 AM
Security Audit — agent-trust-hub — error-consolidation-merge-existing