dotnet-timezone
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends the usage and installation of standard .NET libraries
TimeZoneConverterandNodaTimevia NuGet PackageReference inreferences/code-patterns.md. These are industry-standard packages for handling timezone conversions and arithmetic in C# applications. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input, such as addresses, cities, and regions, to resolve timezone IDs and generate C# code, which presents a surface for potential injection attacks.
- Ingestion points: User-provided place names, addresses, or documents containing location data as described in the 'Resolve Addresses And Locations' section of
SKILL.md. - Boundary markers: None. The instructions do not specify delimiters or warnings to ignore instructions embedded within the location data.
- Capability inventory: The skill generates copy-paste-ready C# code snippets and informational blocks; it does not include capabilities for direct command execution, file system modification, or network requests.
- Sanitization: The skill lacks instructions to sanitize, validate, or escape the location-based strings before using them in the generated output.
Audit Metadata