migrate-mstest-v3-to-v4
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data by reading project files (.csproj, .sln) and source code (.cs) to identify migration needs. This constitutes a potential attack surface where a maliciously crafted project could attempt to influence agent behavior. However, this is an inherent requirement of the skill's purpose (code migration) and is handled through structured instructions.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard .NET CLI commands, such as
dotnet restore,dotnet build, anddotnet test, to establish baselines and verify migration outcomes. These operations are restricted to the local development environment and the project under migration. - [EXTERNAL_DOWNLOADS]: The migration process involves updating MSTest packages through configured NuGet feeds. This is a standard dependency management operation and is necessary for the skill's primary function of upgrading the test framework.
Audit Metadata