dotnet-workload-info
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- External Data Fetching: The skill retrieves metadata from official Microsoft and NuGet infrastructure, such as
api.nuget.organdblob.core.windows.net. These are well-known, established services used for legitimate software distribution and versioning information. - Command Execution Patterns: The instructions include the use of common system utilities like
curl,jq, andunzipto download and parse manifest files. These operations are standard for a discovery tool and are used here to extract specific structured data from official packages. - Data Ingestion Surface: The skill ingests external JSON data from public APIs. While processing external content always introduces a potential surface for indirect prompt injection, the skill is focused on extracting version numbers and tool requirements, which is a common and necessary practice for its stated functionality.
- Vendor Consistency: The external resources and APIs referenced in the skill align with the authoritative infrastructure for the .NET ecosystem, representing expected behavior for a tool authored for this domain.
Audit Metadata