validate-sdk
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [External Downloads and Remote Execution]: The skill downloads the official .NET installation scripts (
dotnet-install.ps1for Windows anddotnet-install.shfor Linux/macOS) fromdot.net, which is a well-known Microsoft domain. While downloading and executing remote scripts is a sensitive operation, these are standard tools for managing .NET environments. - [Command Execution]: The skill uses shell commands to install the SDK, verify the version, and run a diagnostic check. These operations are performed within temporary directories (
$env:TEMPor/tmp) to minimize impact on the user's system and ensure isolation from existing codebases. - [Environment Isolation]: The skill explicitly configures the environment (e.g., setting
DOTNET_MULTILEVEL_LOOKUP=0and using localglobal.jsonfiles) to ensure that validation tests the specifically installed SDK version without interference from the surrounding file system.
Audit Metadata