meziantou-analyzer

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes standard .NET CLI commands, such as dotnet add to install analyzer packages and dotnet build to verify project integrity. It also employs ripgrep (rg) to identify existing configurations within project files. These commands are appropriately scoped to development tasks.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the Meziantou.Analyzer NuGet package and provides links to official documentation on GitHub and Microsoft Learn. These are reputable sources and the operations are expected for a configuration tool.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests repository data from files like AGENTS.md, .editorconfig, and .csproj (ingestion points) to determine configuration state. It lacks explicit boundary markers or sanitization for this content but utilizes a structured 'Ralph Loop' workflow to review capabilities such as dotnet command execution and file writing (capability inventory). This surface is inherent to the skill's primary purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 08:58 AM