managedcode-communication
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill contains an indirect prompt injection surface as it analyzes repository data while possessing the authority to modify files and execute shell commands.\n
- Ingestion points: Repository context inspection is required to identify integration points (SKILL.md).\n
- Boundary markers: No explicit instructions are provided to the agent to ignore or delimit instructions found within the code being analyzed.\n
- Capability inventory: The skill allows the agent to edit targeted files and execute build, test, and validation commands (SKILL.md).\n
- Sanitization: No sanitization logic is specified for the content ingested from the local file system.\n- [EXTERNAL_DOWNLOADS]: The skill references the installation of the ManagedCode.Communication package family from the NuGet registry.\n
- Packages: ManagedCode.Communication, ManagedCode.Communication.AspNetCore, ManagedCode.Communication.Extensions, ManagedCode.Communication.Orleans.\n
- Evidence: Use of dotnet add package commands to install specific versions of the library (SKILL.md).\n- [COMMAND_EXECUTION]: The skill invokes command-line tools for package management and typical development lifecycle tasks.\n
- Evidence: Instructions to use the dotnet CLI for package installation and execution of build/test scripts (SKILL.md).
Audit Metadata