dotnet-security
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a comprehensive security reference guide for .NET developers. It correctly identifies high-risk APIs like BinaryFormatter as unsafe and provides modern alternatives.
- [SAFE]: Instructions regarding credential management follow industry best practices, explicitly advising against hardcoding secrets in source code or configuration files and recommending managed vaults or environment variables.
- [SAFE]: Network-related guidance focuses on hardening transport security (HTTPS, HSTS, CORS) and preventing SSRF through allowlisting, which are standard defensive measures.
- [SAFE]: The documentation for legacy .NET Framework 4.8 correctly identifies specific risks such as ViewState forgery and provides accurate remediation steps including registry configurations and machineKey rotation.
Audit Metadata