dotnet-web-api-review
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference guide for reviewing ASP.NET Core applications. It contains architectural advice, security checklists, and deployment standards without any executable or malicious components.
- [INDIRECT_PROMPT_INJECTION]: As a code review skill, the agent will naturally ingest untrusted data (pull request diffs). The skill proactively mitigates this risk by providing the agent with a rigorous security checklist to identify malicious patterns, hardcoded secrets, and unauthorized access attempts in the code being reviewed.
- [COMMAND_EXECUTION]: The skill mentions standard .NET CLI commands (e.g.,
dotnet build,dotnet test) within the context of recommended Continuous Integration (CI) practices. These are informational examples for the user to implement in their own build pipelines and are not executed by the agent itself. - [CREDENTIALS_UNSAFE]: The security checklists explicitly instruct the reviewer to look for and flag hardcoded secrets, tokens in logs, and insecure storage, promoting defensive security practices.
Audit Metadata