migrate-xunit-to-mstest
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves reading and transforming source code and project configuration files. This data ingestion creates a surface for indirect prompt injection, where a malicious repository could contain instructions designed to deceive the agent during the automated migration. * Ingestion points: The agent reads .cs source files, .csproj files, Directory.Build.props, Directory.Packages.props, and global.json files across several workflow phases. * Boundary markers: The instructions do not mandate the use of delimiters or specific 'ignore-instructions' directives when the agent processes the contents of the project files. * Capability inventory: The agent has permissions to perform local file system writes and execute shell commands through 'dotnet test'. * Sanitization: The skill does not define specific sanitization or validation logic for the content of the files it reads before they are used in the prompt context.
- [EXTERNAL_DOWNLOADS]: The mapping reference document recommends the use of a community-developed port, 'Combinatorial.MSTest', located on a personal GitHub repository (github.com/Youssef1313/Combinatorial.MSTest), as an equivalent for the 'Xunit.Combinatorial' library. While this is a functional recommendation, the source is an unverified external repository.
Audit Metadata