dotnet-maui-doctor
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes numerous system commands to inspect and configure the development environment, including .NET workload management (
dotnet workload install), Android SDK maintenance (sdkmanager), and Xcode configuration (xcode-select,xcodebuild). Some operations, particularly those involving SDK installation and license acceptance, require administrative privileges viasudo. - [EXTERNAL_DOWNLOADS]: The skill fetches version metadata and dependency requirements from official Microsoft release channels (
dotnetcli.blob.core.windows.net) and the NuGet registry (api.nuget.org). These network operations are directed at well-known service endpoints to ensure environment consistency and are essential to the skill's primary function. - [REMOTE_CODE_EXECUTION]: The instructions provide a workflow for downloading and executing the official Microsoft .NET installation script (
dotnet-install.sh) directly from the vendor's domain. This is a recognized and standard method for automated SDK management. - [PROMPT_INJECTION]: The skill includes instructions that encourage the agent to operate autonomously, iterating through tasks and re-validating fixes without constant user intervention. This level of autonomy is intended to streamline environment repair but involves extensive modification of system toolchains.
- [DATA_EXFILTRATION]: The skill ingests data from external JSON manifests provided by Microsoft and NuGet. While this creates an indirect data processing surface, the inputs originate from highly trusted vendors and are used solely for environment configuration.
Audit Metadata