dotnet-source-gen-regex
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bash(dotnet:*)tool to rundotnet buildfor verifying code changes. This is a standard and expected operation for a .NET development skill.- [INDIRECT_PROMPT_INJECTION]: The skill analyzes and transforms external source code files, which constitutes a vulnerability surface. - Ingestion points: Source code files read using the
Read,Glob, andGreptools as specified in the Workflow section of SKILL.md. - Boundary markers: None are defined in the instructions to help the agent distinguish between code logic and potential embedded instructions.
- Capability inventory: The skill has the ability to modify local files and execute shell commands through the
dotnetCLI. - Sanitization: There are no instructions provided for sanitizing or validating the contents of the files before they are processed by the agent.
Audit Metadata