migrate-static-to-wrapper
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions direct the agent to utilize standard shell commands including
dotnet build,dotnet test,sed,cat, andGet-Content. These are used to verify the integrity of the migration and provide fallback mechanisms for file manipulation, which is consistent with the skill's primary purpose. - [INDIRECT_PROMPT_INJECTION]: The skill reads and modifies C# source files from the workspace, creating an attack surface where malicious instructions embedded in the code could attempt to influence the agent's behavior during the migration process.
- Ingestion points: C# source files (.cs) discovered within the workspace scope.
- Boundary markers: The workflow does not specify the use of delimiters or instructions to ignore potential commands embedded within the ingested source code.
- Capability inventory: The skill allows the agent to perform file writes and execute build/test commands via the shell.
- Sanitization: No explicit sanitization or filtering of the source code content is performed before processing.
Audit Metadata