migrate-xunit-to-mstest
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [Indirect Prompt Injection Surface]: The skill processes untrusted project files and source code as part of its migration workflow. Because the agent has the capability to modify files and execute commands, there is a potential for instructions embedded in the source code to influence its actions.
- Ingestion points: Test source files (.cs), Directory.Build.props, Directory.Packages.props, global.json, and xunit.runner.json.
- Boundary markers: No explicit delimiters are used to separate source content from agent instructions.
- Capability inventory: File system write access and shell command execution (dotnet test).
- Sanitization: The skill does not implement specific filtering for the content of the files it reads.
- [Command Execution]: The skill utilizes the 'dotnet test' command to build the project and verify test results. This is an intended part of the migration process but involves executing the project's code.
- [External Package References]: The migration process involves adding standard .NET testing packages like MSTest and Microsoft.NET.Test.Sdk to the project configuration. These are official resources for the .NET ecosystem.
Audit Metadata