dotnet-web-backend
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to utilize standard .NET development tools to manage project dependencies and perform security vulnerability audits.
- Evidence: Use of
dotnet add packagefor library installation anddotnet list package --vulnerablefor transitively auditing the dependency graph. - [INDIRECT_PROMPT_INJECTION]: As a coding assistant skill, it processes user-provided specifications to generate source code and configuration files, creating a standard surface for indirect instructions.
- Ingestion points: User-provided requirements for API endpoint design, business logic, and infrastructure configuration.
- Boundary markers: The skill does not explicitly define delimiters to isolate user requirements from the agent's logic.
- Capability inventory: The skill leverages file system modifications and
dotnetCLI command execution. - Sanitization: No explicit instructions for sanitizing or escaping user-provided input before its use in code generation are included.
Audit Metadata