aspire
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to invoke the .NET Aspire CLI tool (
aspire) for project lifecycle tasks includinginit,run,update,deploy, andpublish. It also executes build, test, and validation commands as part of its primary orchestration purpose. - [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of browser binaries for automated testing. In
references/testing.md, it utilizes theMicrosoft.Playwrightlibrary to programmatically install Chromium. This is a standard and expected operation for the Playwright testing framework. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface that could be targeted by indirect prompt injection if processing untrusted repository content.
- Ingestion points: The skill reads project files (
.csproj,.mts), configuration (aspire.config.json), and general repository context. - Boundary markers: The instructions do not define specific delimiters or "ignore" instructions for the ingested data.
- Capability inventory: The skill can execute shell commands via the Aspire CLI and build toolchain, and has the ability to edit targeted files within the repository.
- Sanitization: No explicit sanitization or validation of the repository content is described before it is used to inform agent actions.
- [SAFE]: All external references and download sources target official documentation and repositories from trusted organizations, including
aspire.dev,github.com/microsoft/aspire, andgithub.com/CommunityToolkit/Aspire.
Audit Metadata