complexity

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill performs standard code analysis tasks using official .NET tooling (Microsoft.CodeAnalysis.NetAnalyzers). It interacts with expected project files like .editorconfig, CodeMetricsConfig.txt, and project properties to set up maintainability gates.
  • [COMMAND_EXECUTION]: The skill uses rg (ripgrep) to detect the current state of analyzer configurations and dotnet build to validate changes. These are standard development tools used within their intended scope.
  • [INDIRECT_PROMPT_INJECTION]: While the skill ingests source code from the repository, its purpose is to analyze structural complexity (cyclomatic complexity, coupling, etc.) using deterministic analyzers. There is no evidence of untrusted data being interpolated into agent prompts in a way that could cause instruction override.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 08:58 AM