csharp-refactor
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes C# source files and project configurations which could contain malicious instructions designed to subvert the agent's behavior.
- Ingestion points: Processes
.csand.csprojfiles usingRead,Glob, andGrep(SKILL.md). - Boundary markers: Absent. The skill does not use specific markers to distinguish code from instructions.
- Capability inventory: The skill employs
EditandWritetools to modify local files and suggests the use of thedotnet testcommand (SKILL.md). - Sanitization: Absent. There is no logic to filter or sanitize the contents of the files before analysis.
- [COMMAND_EXECUTION]: The skill guidelines specify the execution of
dotnet testto verify code changes. While this is a standard development practice, it allows the agent to execute project-defined code.
Audit Metadata