nunit

Pass

Audited by Gen Agent Trust Hub on Apr 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation and code templates for NUnit testing. All external references point to official NUnit repositories on GitHub and the official documentation site. No malicious patterns such as prompt injection, data exfiltration, or obfuscation were detected.
  • [COMMAND_EXECUTION]: The skill documents the use of standard dotnet test commands for executing tests. While this involves command execution, it is the primary and intended purpose of the skill and is documented using standard developer practices.
  • [INDIRECT_PROMPT_INJECTION]: The skill instructions involve the agent executing tests on user code via dotnet test. This represents a potential vulnerability surface if the code is untrusted. However, this is the primary purpose of a testing skill and no malicious intent was found. Evidence chain: 1. Ingestion points: User-provided source and test files (processed via agent task); 2. Boundary markers: None specified in the skill body; 3. Capability inventory: Shell command execution via dotnet test (SKILL.md); 4. Sanitization: None specified in the instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 22, 2026, 02:19 AM
Security Audit — agent-trust-hub — nunit