platform-detection

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • Command Execution: The skill instructions include a step to run dotnet --version to identify the installed SDK. This is a common diagnostic action and is used solely for environmental identification without performing sensitive operations or system changes.
  • Indirect Prompt Injection: The skill processes information from project configuration files like .csproj, global.json, and Directory.Build.props. While these files are external inputs (Ingestion points: SKILL.md), the skill's logic is restricted to evaluating specific .NET properties to determine the test platform. It does not possess capabilities that could be exploited by malicious data in these files beyond identifying the configuration (Capability: dotnet --version; Boundary markers: Absent; Sanitization: Absent).
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 08:48 PM
Security Audit — agent-trust-hub — platform-detection