scaffold-dotnet-test-project
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides a mechanism to read and apply repository-specific instructions from a local file at
.agents/skill-overlays/dotnet-test/scaffold-dotnet-test-project.md. - Ingestion points: The 'Repository overlay' section in
SKILL.mddirects the agent to check for and read this file at the repository root before performing any discovery or editing tasks. - Boundary markers: The skill instructs the agent to verify specific frontmatter fields (
core,binding-revision, andmode) in the overlay file as a prerequisite for application. - Capability inventory: The skill utilizes various
dotnetCLI commands (includingnew,add reference,sln add, andtest) to modify project files and execute tests, potentially guided by the overlay content. - Sanitization: While the skill requires structural verification of the overlay's frontmatter, it lacks specific sanitization or filtering for the instructional content contained within the markdown body of the file.
Audit Metadata