csharp-expert
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- Indirect Prompt Injection Surface: The skill functions as a router, analyzing repository manifests (such as .csproj and .sln files) and user-provided source code to determine which specialist specialist to invoke. This process represents an attack surface for indirect prompt injection, as malicious instructions embedded in the analyzed code could attempt to manipulate the routing logic. The skill does not specify explicit boundary markers or sanitization for this ingested data, though it operates within the agent's standard safety context.
- External Plugin Installation: The skill provides detailed instructions and commands for installing specialist plugins from the official dotnet/skills repository. These references target a trusted organization and are provided to extend the agent's capabilities for specific .NET frameworks. These patterns are consistent with the skill's role as a front door for the dotnet specialist marketplace.
Audit Metadata