dotnet-trace-collect

Pass

Audited by Gen Agent Trust Hub on Apr 11, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for acquiring official .NET diagnostic tools from trusted Microsoft domains.
  • Fetches the perfcollect script from Microsoft's aka.ms official shortener.
  • Downloads dotnet-trace binaries for various Linux architectures and Windows from aka.ms links.
  • References the official Microsoft GitHub repository for PerfView releases.
  • Recommends the official Microsoft Container Registry (mcr.microsoft.com) for the dotnet-monitor image.
  • [COMMAND_EXECUTION]: The skill describes the use of various command-line diagnostic tools which may require elevated privileges depending on the environment.
  • Uses sudo and root access for kernel-level tracing tasks on Linux, such as dotnet-trace collect-linux and perfcollect.
  • Documents the use of Windows administrative privileges for ETW-based tracing with PerfView.
  • Recommends the use of privileged: true and SYS_ADMIN capabilities in Kubernetes pod specifications when deep kernel tracing is required by the user.
  • Provides security guidance against using the --no-auth flag for dotnet-monitor in production environments to prevent unauthorized access to diagnostic APIs.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 11, 2026, 12:41 PM