find-repeated-work-within-one-build
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill involves executing the
dotnet msbuildcommand to analyze build performance. This is a standard operation within the skill's intended purpose using the developer's own tooling. - Indirect Prompt Injection Surface: The skill ingests and analyzes external files such as
.binlogand.logfiles. This creates a surface where content within those files could potentially influence agent processing. - Ingestion points: The skill processes
build.binlogandfull.logfiles. - Boundary markers: The instructions do not explicitly define delimiters or boundary markers for the log content.
- Capability inventory: The skill utilizes the
binlogMCP server and thedotnet msbuildutility. - Sanitization: Specific sanitization steps for the input log data are not detailed in the instructions.
Audit Metadata