migrate-xunit-to-xunit-v3
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute
dotnet testin Step 13 to verify that the migration was successful and that tests pass as expected. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the user's workspace, which presents an attack surface where malicious instructions could be embedded in the source code or project files being migrated.
- Ingestion points: The skill reads project files (
.csproj,.sln,.slnx), MSBuild files (Directory.Build.props,Directory.Build.targets,Directory.Packages.props), and C# source files (.cs) to identify migration needs. - Boundary markers: There are no explicit instructions or delimiters defined to prevent the agent from following instructions potentially embedded within the source code being analyzed.
- Capability inventory: The agent is authorized to write to the file system (modifying project and source files) and execute shell commands (
dotnet test). - Sanitization: The skill does not implement specific sanitization or validation of the content read from the workspace before processing or execution.
- [REMOTE_CODE_EXECUTION]: In Step 2 and Step 12, the skill updates project dependencies by querying configured NuGet package feeds. While this involves external resources, xUnit.net is a well-known and established testing framework, and the operations follow standard .NET development practices.
Audit Metadata