dotnet-pinvoke

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process C/C++ native headers and documentation provided by the user to generate P/Invoke signatures. This creates a surface where instructions embedded in header comments could potentially influence agent behavior during code generation.
  • Ingestion points: Native header or documentation (SKILL.md).
  • Boundary markers: The skill does not explicitly instruct the agent to use delimiters or ignore embedded instructions within the source headers.
  • Capability inventory: The skill generates C# code and P/Invoke declarations; it does not directly execute system commands or perform network operations.
  • Sanitization: No specific sanitization or validation steps are provided for the input headers.
  • [DYNAMIC_EXECUTION]: The skill provides instructions and code examples for implementing NativeLibrary.SetDllImportResolver and NativeLibrary.TryLoad. These .NET APIs are used to dynamically load native libraries (.dll, .so, .dylib) from computed paths at runtime. While this is a standard and necessary practice for cross-platform .NET development, it involves loading executable code from paths determined during program execution.
  • [EXTERNAL_DOWNLOADS]: The skill suggests utilizing established developer tools from Microsoft, including the Microsoft.Windows.CsWin32 and Microsoft.Windows.CsWinRT packages via NuGet, and the Objective Sharpie tool for Objective-C bindings. These references target well-known and official services.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 08:35 AM