check-bin-obj-clash
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [SAFE]: No malicious patterns or behaviors were identified. The skill follows established practices for debugging MSBuild environments.
- [INDIRECT_PROMPT_INJECTION]: The skill processes build artifacts, which is a standard surface for indirect prompt injection. Given the context of a build debugging tool, this surface is considered acceptable.
- Ingestion points: Build logs (.binlog, full.log) and project files (.csproj, .sln).
- Boundary markers: The agent relies on specific command-line tools (MSBuild and grep) to extract data, but no explicit prompts are used to delimit the data from instructions.
- Capability inventory: The skill uses
dotnet msbuildand common shell utilities likegrep,sort, anduniqto process files. - Sanitization: No explicit sanitization or content validation is performed on the log data.
- [COMMAND_EXECUTION]: The skill uses local commands to inspect build states and properties.
- Evidence: Use of
dotnet msbuildto replay logs and query project properties, andgrepto extract metadata from diagnostic logs.
Audit Metadata