migrate-dotnet8-to-dotnet9
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill operates on untrusted data by ingesting and modifying project source code, solution files, and configuration files (e.g., Dockerfiles, global.json).
- Ingestion points: Project or solution path provided as input, including all files within the project structure.
- Boundary markers: Instructions direct the agent to rely on provided reference documents for migration logic, which helps constrain the agent's behavior.
- Capability inventory: The skill performs file read/write operations and executes shell commands (dotnet build, dotnet restore, dotnet test).
- Sanitization: Input project files are not sanitized, creating a surface for indirect prompt injection if the project contains malicious instructions.
- [COMMAND_EXECUTION]: The skill instructs the agent to run various .NET CLI tools to establish a build baseline and verify the migration. These include dotnet --version, dotnet build, dotnet restore, and dotnet test commands. This is standard and necessary for the skill's primary purpose.
Audit Metadata