detect-static-dependencies
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFE
Full Analysis
- [Code Ingestion and Processing]: The skill analyzes local C# source files and project structures. While this involves reading untrusted content from the codebase, the activity is confined to identifying static API patterns for reporting purposes.
- [Search Patterns]: The skill searches for sensitive APIs like
Environment.GetEnvironmentVariableandProcess.Start. However, this is done as a static search within source code to identify testability issues, rather than executing these commands on the host system. - [Workflow and Scope]: The skill defines clear boundaries by excluding common build artifact directories like
obj/andbin/, ensuring the scan remains focused on relevant source code.
Audit Metadata