dotnet-pinvoke
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill's primary purpose is to educate developers on best practices for .NET native interop, specifically focusing on preventing memory corruption and ensuring data integrity across the managed/native boundary.
- [EXTERNAL_DOWNLOADS]: The skill references official Microsoft development tools, including CsWin32 and CsWinRT, and directs users to Microsoft's official documentation. These are recognized as safe, well-known services.
- [COMMAND_EXECUTION]: The skill provides instructions for using standard .NET CLI commands (e.g.,
dotnet add package) to install verified Microsoft packages. - [PROMPT_INJECTION]: The skill identifies an indirect prompt injection surface by processing native headers and documentation.
- Ingestion points: Native header or documentation (SKILL.md)
- Boundary markers: Absent
- Capability inventory: Generation of P/Invoke and LibraryImport code declarations
- Sanitization: The skill implements a manual validation checklist rather than automated sanitization to ensure the generated interop code is correct and safe.
Audit Metadata