re-dotnet
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the .NET SDK and specialized reverse engineering tools from official package registries and well-known GitHub repositories.
- [COMMAND_EXECUTION]: Utilizes standard system commands and command-line utilities for environment configuration and the analysis of .NET bytecode.
- [INDIRECT_PROMPT_INJECTION]: The skill defines procedures for ingesting and analyzing untrusted .NET assembly files (e.g., in the '操作步骤' section). This establishes a data ingestion surface where an attacker could embed instructions within a binary's metadata or string pools to misdirect an agent. The skill lacks explicit sanitization or boundary markers to mitigate this risk.
Audit Metadata