dotnet-source-gen-regex
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill's primary function is to automate a routine .NET refactoring task. It adheres to the principle of least privilege by restricting shell access to the
dotnetcommand set. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because it reads and processes external source code files from the user's codebase. This is a standard risk for code-analysis tools where malicious content in the files being read could attempt to influence agent logic.
- Ingestion points: Processes codebase files via
Read,Glob, andGreptools. - Boundary markers: None present in the instructions to separate untrusted code content from agent instructions.
- Capability inventory: Limited to
dotnetcommand execution and file reading/modification. - Sanitization: No sanitization or escaping of the ingested code content is described.
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to executedotnet buildfor verification purposes. The tool is appropriately restricted to thedotnet:*scope, preventing the execution of arbitrary system commands.
Audit Metadata