migrate-dotnet8-to-dotnet9
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- Indirect Prompt Injection Surface: The skill is designed to analyze external codebase assets, including project configuration files (
.csproj,.sln,.slnx) and source files, to perform version migration. If these external assets originate from untrusted sources, they could contain adversarial instructions intended to influence the agent's operations. - Ingestion points: The skill ingests external project files, structure configurations, and source code files across the repository as detailed in
SKILL.md(Step 1 and Step 3). - Boundary markers: There are no explicit prompt boundary markers or instruction isolation mechanisms defined to separate external data text from the system instructions.
- Capability inventory: The skill possesses capabilities to modify local files, execute build and test tools (
dotnet build,dotnet test,dotnet restore), and create version control commits. - Sanitization: Input sanitization or verification of the repository content integrity is not explicitly implemented before the workflow steps execute.
Audit Metadata