aspire

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill is designed to invoke the .NET Aspire CLI tool (aspire) for project lifecycle tasks including init, run, update, deploy, and publish. It also executes build, test, and validation commands as part of its primary orchestration purpose.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of browser binaries for automated testing. In references/testing.md, it utilizes the Microsoft.Playwright library to programmatically install Chromium. This is a standard and expected operation for the Playwright testing framework.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface that could be targeted by indirect prompt injection if processing untrusted repository content.
  • Ingestion points: The skill reads project files (.csproj, .mts), configuration (aspire.config.json), and general repository context.
  • Boundary markers: The instructions do not define specific delimiters or "ignore" instructions for the ingested data.
  • Capability inventory: The skill can execute shell commands via the Aspire CLI and build toolchain, and has the ability to edit targeted files within the repository.
  • Sanitization: No explicit sanitization or validation of the repository content is described before it is used to inform agent actions.
  • [SAFE]: All external references and download sources target official documentation and repositories from trusted organizations, including aspire.dev, github.com/microsoft/aspire, and github.com/CommunityToolkit/Aspire.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 08:58 AM