skills/kevintsengtw/dotnet-testing-agent-skills/dotnet-testing-advanced-aspire-testing/Gen Agent Trust Hub
dotnet-testing-advanced-aspire-testing
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill's description field contains instructions aimed at overriding the agent's skill selection behavior, directing it to activate the skill for any mention of .NET Aspire even without a specific request for testing guidance.
- [COMMAND_EXECUTION]: The code template for database management in templates/database-manager.cs uses string interpolation to build SQL commands for database creation (e.g., CREATE DATABASE "{databaseName}"), which is an insecure practice that could lead to SQL injection if identifiers are sourced from untrusted input.
- [EXTERNAL_DOWNLOADS]: The project templates reference versions of the AwesomeAssertions (9.4.0) and Npgsql (10.0.1) libraries that are not currently available on the official NuGet registry, posing a risk of build errors or potential dependency confusion.
Audit Metadata