migrate-dotnet9-to-dotnet10
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from user project files, creating an attack surface for indirect prompt injection.
- Ingestion points: The agent reads and interprets content from
.csproj,.sln,.slnx,Dockerfile, and C# source files (SKILL.md, Step 1). - Boundary markers: The workflow explicitly instructs the agent to treat the provided reference documents as authoritative and to avoid unauthorized external web searches or unnecessary filesystem exploration (
SKILL.md, Workflow). - Capability inventory: The skill utilizes
dotnetCLI tools for building, testing, and restoring packages, and it has the capability to modify project and source files (SKILL.md, Steps 1-6). - Sanitization: No specific sanitization or escaping mechanisms for the processed source code are described in the instructions.
- [COMMAND_EXECUTION]: The skill requires the execution of shell commands to establish baselines, perform restores, and verify the migration.
- Execution patterns: The agent runs
dotnet --version,dotnet build,dotnet restore, anddotnet testas part of its core workflow (SKILL.md). - Infrastructure updates: The skill guides the user through updating Dockerfiles, which may involve executing
apt-getcommands within container environments (references/containers-interop-dotnet9to10.md).
Audit Metadata