analyzing-dotnet-performance
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface where untrusted data could influence agent behavior.
- Ingestion points: The skill ingests C# source code files and repository content as defined in
SKILL.mdunder the Inputs section. - Boundary markers: The instructions lack specific requirements for using delimiters or protective instructions (e.g., 'ignore embedded commands') when reading user-provided code.
- Capability inventory: The skill utilizes file system read access and shell execution (running
grepandwcrecipes) to perform its analysis. - Sanitization: No sanitization or validation of the ingested source code content is described before it is processed by the agent.
Audit Metadata