create-datadriven-aspnetcore
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes several shell commands as part of its scaffolding and verification workflow.
- Evidence: Instructions include
dotnet restore,dotnet build,dotnet tool restore,dotnet run, and Entity Framework commands likedotnet ef migrations addanddotnet ef database update. - [EXTERNAL_DOWNLOADS]: The skill adds necessary NuGet packages and restores .NET tools from official registries.
- Evidence: Workflow Step 1 and 5 instruct the agent to add package references (e.g.,
Microsoft.EntityFrameworkCore.Design) and restore local or global tools usingdotnet tool restore. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it processes natural language requests and inspects existing project files to generate new code.
- Ingestion points: Natural language scaffolding requests and local project files (
.csproj,Program.cs, model classes). - Boundary markers: None explicitly defined to separate user input from system instructions.
- Capability inventory: File writing, shell command execution via
dotnetCLI, and local network request execution via.httpfiles. - Sanitization: Relies on the agent's internal generative logic without explicit validation steps.
Audit Metadata