comet-go
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Dynamic Assembly Loading Architecture: The skill describes a development cycle where source code is compiled into a DLL and loaded into a companion application at runtime via
Assembly.Load. While dynamic loading is a sensitive operation, it is a standard approach for implementing 'Hot Reload' functionality in .NET development environments, enabling developers to see changes instantly without a full application restart. - External Framework Integration: The instructions reference the
maui goCLI tool and the Comet MVU framework. These are specific to the framework's ecosystem and are used for routine tasks such as project scaffolding and starting the development server. - Indirect Prompt Injection Surface: As a tool designed to assist in writing and editing C# code, the skill naturally handles data (source code) that could theoretically contain embedded instructions.
- Ingestion points: The agent processes and edits user-provided
.csfiles. - Boundary markers: The instructions do not define specific delimiters for separating code logic from instructions.
- Capability inventory: The framework involves compilation via Roslyn and execution through a companion app.
- Sanitization: There is no explicit sanitization of the code content described, as the skill is intended for a developer-controlled environment where code review is standard practice.
Audit Metadata