csharp-developer
Fail
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: CRITICALINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and process untrusted project data, which introduces a potential surface for indirect prompt injection where instructions could be hidden in project metadata or configuration files.
- Ingestion points: The skill workflow explicitly instructs the agent to "Review .csproj files, NuGet packages, architecture" in
SKILL.md. - Boundary markers: There are no specific delimiters or warnings provided to the agent to distinguish between instructions and the data being analyzed within these files.
- Capability inventory: The skill has the capability to generate code, architectural designs, and implementation templates based on the analyzed data.
- Sanitization: No explicit sanitization or validation logic for the input from project files is defined.
- [EXTERNAL_DOWNLOADS]: The skill contains references to external documentation hosted on GitHub Pages.
- Evidence: The
Documentationlink inSKILL.mdpoints tohttps://jeffallan.github.io/claude-skills/skills/language/csharp-developer/. - Context: This is a vendor-owned resource used for providing supplementary developer guidance and is consistent with the skill's primary purpose.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata