resolve-project-references
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a shell command to replay a binlog and extract performance summaries using 'dotnet msbuild' and 'grep'. These are standard diagnostic tools used in the intended development environment.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external, user-provided build logs ('build.binlog'). This creates an attack surface where malicious content in the logs could attempt to influence agent behavior, though it is consistent with the skill's diagnostic purpose.
- Ingestion points: User-provided 'build.binlog' file referenced in SKILL.md.
- Boundary markers: No delimiters are used to wrap the processed log content.
- Capability inventory: The skill uses shell execution ('dotnet', 'grep') to analyze logs.
- Sanitization: No sanitization of log content is specified before processing.
Audit Metadata