meziantou-analyzer
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard .NET CLI commands, such as
dotnet addto install analyzer packages anddotnet buildto verify project integrity. It also employsripgrep(rg) to identify existing configurations within project files. These commands are appropriately scoped to development tasks. - [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
Meziantou.AnalyzerNuGet package and provides links to official documentation on GitHub and Microsoft Learn. These are reputable sources and the operations are expected for a configuration tool. - [INDIRECT_PROMPT_INJECTION]: The skill ingests repository data from files like
AGENTS.md,.editorconfig, and.csproj(ingestion points) to determine configuration state. It lacks explicit boundary markers or sanitization for this content but utilizes a structured 'Ralph Loop' workflow to review capabilities such asdotnetcommand execution and file writing (capability inventory). This surface is inherent to the skill's primary purpose.
Audit Metadata