csharp-dotnet
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted project files such as C# source code, MSBuild scripts, and configuration files, creating a potential surface for indirect prompt injection.\n
- Ingestion points: Project-specific files including
global.json,Directory.Build.props, and.csfiles are read into the agent's context as specified in the Core Rules.\n - Boundary markers: The instructions do not define specific delimiters or instructions for the agent to distinguish between system instructions and data from the code being analyzed.\n
- Capability inventory: The agent is empowered to perform file modifications and execute shell commands like
dotnet build,dotnet test, anddotnet tool install.\n - Sanitization: No content-level sanitization or safety warnings for ingested code are specified.\n- [EXTERNAL_DOWNLOADS]: The skill workflow recommends installing global .NET diagnostic tools such as
dotnet-counters,dotnet-trace, anddotnet-dump. These tools are fetched from the official NuGet registry, which is a well-known service for .NET package distribution.\n- [COMMAND_EXECUTION]: The defined workflows involve executing various .NET SDK and diagnostic CLI tools. This includes performing build operations, running test suites, and capturing process traces or dumps, which are standard for the skill's intended development and debugging use-cases.
Audit Metadata