platform-detection
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill instructions include a step to run
dotnet --versionto identify the installed SDK. This is a common diagnostic action and is used solely for environmental identification without performing sensitive operations or system changes. - Indirect Prompt Injection: The skill processes information from project configuration files like
.csproj,global.json, andDirectory.Build.props. While these files are external inputs (Ingestion points: SKILL.md), the skill's logic is restricted to evaluating specific .NET properties to determine the test platform. It does not possess capabilities that could be exploited by malicious data in these files beyond identifying the configuration (Capability: dotnet --version; Boundary markers: Absent; Sanitization: Absent).
Audit Metadata