migrate-xunit-to-xunit-v3
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill instructs the agent to execute the
dotnet testcommand to verify the migration results. This involves executing local binaries and tests within the developer's environment, which is a standard step for verifying code changes. - File System Interaction: The skill performs read and write operations on .NET project files (e.g.,
.csproj,.sln,Directory.Build.props) and C# source files. This is necessary to automate the transition between xUnit versions and address breaking changes in the framework. - Indirect Prompt Injection Surface: The skill processes local project files and source code as input. This creates a potential surface where embedded comments or configuration data could contain instructions intended to influence the agent's behavior. This is an inherent consideration for any tool that refactors existing codebases and is mitigated by the skill's specific migration rules and standard agent guardrails.
Audit Metadata