setup-local-sdk
Fail
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill downloads and executes official .NET installation scripts (dotnet-install.sh and dotnet-install.ps1) directly from Microsoft's dot.net domain.
- [EXTERNAL_DOWNLOADS]: Pulls configuration and installation scripts from https://dot.net/v1/.
- [COMMAND_EXECUTION]: Uses system commands to verify requirements and manage the local environment, including dotnet, curl, uname, and chmod.
- [PROMPT_INJECTION]: The skill processes user-supplied version strings which are used as arguments in shell commands.
- Ingestion points: User-provided version, channel, and quality strings in Step 1 (SKILL.md).
- Boundary markers: The instructions advise the agent to map user responses to specific command-line flags, providing a logical boundary for the input.
- Capability inventory: File system writes (creating scripts, global.json, .gitignore), network access via curl and Invoke-WebRequest, and shell execution across workflow steps.
- Sanitization: Relies on the agent's interpretation to map user input to valid flag values (--channel, --version) rather than using automated sanitization scripts.
Recommendations
- HIGH: Downloads and executes remote code from: https://dot.net/v1/dotnet-install.sh - DO NOT USE without thorough review
Audit Metadata