project-setup
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references standard .NET project templates and development tools from well-known services and official registries.\n
- Evidence: The skill uses official Microsoft project templates via
dotnet newand installs established development tools likedotnet-efandRoslynator.Analyzersfrom their respective official package registries.\n- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes repository content and possesses the capability to modify files and execute commands.\n - Ingestion points: The skill instructions involve inspecting the repository context, including existing solution structures and SDK configurations as described in SKILL.md.\n
- Boundary markers: No explicit delimiters or instructions to ignore potential instructions within the analyzed source code are provided in the skill body or references.\n
- Capability inventory: The skill is authorized to edit repository files and execute build, test, and lint commands through the CLI according to the manifest in SKILL.md.\n
- Sanitization: There is no evidence of sanitization or validation of the repository content before it is processed or used in shell operations.
Audit Metadata