project-setup

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references standard .NET project templates and development tools from well-known services and official registries.\n
  • Evidence: The skill uses official Microsoft project templates via dotnet new and installs established development tools like dotnet-ef and Roslynator.Analyzers from their respective official package registries.\n- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes repository content and possesses the capability to modify files and execute commands.\n
  • Ingestion points: The skill instructions involve inspecting the repository context, including existing solution structures and SDK configurations as described in SKILL.md.\n
  • Boundary markers: No explicit delimiters or instructions to ignore potential instructions within the analyzed source code are provided in the skill body or references.\n
  • Capability inventory: The skill is authorized to edit repository files and execute build, test, and lint commands through the CLI according to the manifest in SKILL.md.\n
  • Sanitization: There is no evidence of sanitization or validation of the repository content before it is processed or used in shell operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 08:58 AM