format
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
dotnetCLI to perform formatting, verification, and restoration tasks (e.g.,dotnet format,dotnet restore). These are standard operations for .NET development. \n- [INDIRECT_PROMPT_INJECTION]: The skill reads project configuration files such as.editorconfig, solution/project files, andglobal.json. While these files could theoretically contain malicious instructions if the workspace is untrusted, the skill explicitly warns to only operate within a trusted workspace. \n - Ingestion points:
SKILL.md(Workflow Step 1) specifies reading configuration and project files from the workspace. \n - Boundary markers: No explicit delimiters are used for the content of these files. \n
- Capability inventory: The skill executes shell commands (
dotnet format) which can restore packages and load analyzers. \n - Sanitization: The skill relies on the underlying
dotnettool's handling of these files. \n- [DYNAMIC_EXECUTION]: Thedotnet formatcommand may load and execute code analyzers (compiled DLLs) from the project workspace. The skill correctly identifies this behavior and cautions the user to verify the workspace's trustworthiness before execution.
Audit Metadata