dotnet-centralise-packages
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
dotnetCLI to list dependencies (dotnet package list) and verify solution integrity (dotnet build). These operations are restricted to thedotnetcommand scope. - [DATA_EXPOSURE]: The skill reads and modifies standard .NET project files, including solution files (.sln), project files (.csproj), and configuration files (Directory.Packages.props, Directory.Build.props). This behavior is required for the skill's primary functionality.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from project files and CLI command output.
- Ingestion points: Project files (*.csproj, *.sln) and the JSON output of dependency listing commands.
- Boundary markers: Not present.
- Capability inventory: Includes the ability to execute scoped shell commands (
dotnet) and perform file system modifications. - Sanitization: No specific validation of package names or version strings from project files is performed before they are used in the migration logic.
Audit Metadata