skills/github/awesome-copilot/scaffolding-oracle-to-postgres-migration-test-project/Gen Agent Trust Hub
scaffolding-oracle-to-postgres-migration-test-project
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external project files (.csproj) to configure the new test project. This creates a surface where malicious project metadata could influence subsequent file creation or build commands. * Ingestion points: Project file (.csproj) reading in Step 1. * Boundary markers: None defined to isolate the untrusted project data. * Capability inventory: The skill can write files and execute the dotnet build command. * Sanitization: No specific validation or sanitization of the input project file content is mentioned.
- [COMMAND_EXECUTION]: The skill invokes project build commands (Step 5) to verify the generated test project, which involves executing system-level build tools like dotnet build.
- [EXTERNAL_DOWNLOADS]: The skill fetches standard libraries from the NuGet registry, specifically Oracle.ManagedDataAccess.Core and xUnit.
Audit Metadata