skills/dotnet/roslyn/validate-sdk/Gen Agent Trust Hub

validate-sdk

Pass

Audited by Gen Agent Trust Hub on Sep 6, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [External Downloads and Remote Execution]: The skill downloads the official .NET installation scripts (dotnet-install.ps1 for Windows and dotnet-install.sh for Linux/macOS) from dot.net, which is a well-known Microsoft domain. While downloading and executing remote scripts is a sensitive operation, these are standard tools for managing .NET environments.
  • [Command Execution]: The skill uses shell commands to install the SDK, verify the version, and run a diagnostic check. These operations are performed within temporary directories ($env:TEMP or /tmp) to minimize impact on the user's system and ensure isolation from existing codebases.
  • [Environment Isolation]: The skill explicitly configures the environment (e.g., setting DOTNET_MULTILEVEL_LOOKUP=0 and using local global.json files) to ensure that validation tests the specifically installed SDK version without interference from the surrounding file system.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 6, 2026, 10:36 AM
Security Audit — agent-trust-hub — validate-sdk