scaffold-dotnet-test-project
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- Indirect Prompt Injection Surface: The skill is designed to look for and apply repository-specific instructions from a local file path (
.agents/skill-overlays/dotnet-test/scaffold-dotnet-test-project.md). This 'Repository overlay' mechanism allows content within a repository to influence the agent's behavior and conventions. The skill includes safety instructions stating that an overlay cannot expand tool permissions or task scope, and it requires specific frontmatter markers before application to mitigate unauthorized or accidental overrides. - Command Execution: The workflow utilizes standard development tools, specifically the
.NET CLI(dotnet new,dotnet add reference,dotnet sln,dotnet test), to perform its tasks. These commands are used according to their intended purpose for project management and test verification within the established repository context.
Audit Metadata