migrate-xunit-to-mstest
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Standard Development Command Execution: The skill utilizes the
dotnet testcommand to validate the migration process. This is the official and standard way to run tests in the .NET ecosystem and is used here within its intended scope for verification. - Indirect Prompt Injection Surface: The skill processes local source code files and executes shell commands. This creates a potential surface where malicious content in test files could influence agent behavior.
- Ingestion points: Project configuration files (.csproj, .props) and C# source files (.cs) in the user's workspace.
- Boundary markers: No explicit delimiters are specified for separating file content from instructions.
- Capability inventory: The skill performs file reads, file modifications, and executes shell commands (
dotnet test). - Sanitization: The skill employs specific mapping logic for attributes and assertions, acting as an implicit constraint on the types of modifications made to the source code.
- External Documentation and References: The cheatsheet provides links to official Microsoft documentation and a specific community project on GitHub for specialized features. These are provided as informational references for the user and do not involve automated execution or downloads by the agent.
Audit Metadata