system-text-json-net11

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • Remote Script Download: The skill provides commands to download the official dotnet-install script from the dot.net domain. This is a recognized service for managing .NET SDK installations. The use of this script is a standard approach for ensuring the correct runtime environment is available for executing the provided code samples.
  • Local Execution and Environment Setup: The installation instructions are designed to install the .NET SDK into a project-local directory (./.dotnet) rather than requiring administrative privileges or making permanent system-wide changes to the PATH. This approach follows the principle of least privilege for development environments.
  • Dynamic Command Execution: To validate the .NET 11 features, the skill instructs the agent to compile and run generated C# code using the dotnet run command. This behavior is directly aligned with the skill's primary purpose of demonstrating functional API usage.
  • Temporary File Handling: The skill includes proper cleanup logic for the downloaded installation scripts, using Remove-Item in PowerShell and trap in shell scripts to ensure temporary files are deleted after use, which is a good security and hygiene practice.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 09:24 PM