stryker
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard .NET CLI commands such as
dotnet tool installanddotnet strykerto manage and execute mutation tests. These commands are typical for .NET development workflows and are used as intended for the tool's functionality.\n- [EXTERNAL_DOWNLOADS]: The skill facilitates the download of thestrykermutation testing tool through the official .NET package management system. It references the project repository atgithub.com/stryker-mutator/stryker-net, which is a well-known open-source source for this utility.\n- [INDIRECT_PROMPT_INJECTION]: The skill analyzes repository contents, such as project files (.csproj,.sln) and tool manifests, to configure the mutation testing process, creating an ingestion surface for potentially untrusted data from the codebase.\n - Ingestion points: Reads project structure and configuration files via
rganddotnetcommands inSKILL.mdandreferences/stryker.md.\n - Boundary markers: None identified; the skill relies on the underlying .NET tools for safe processing of project files.\n
- Capability inventory: Includes shell command execution (
dotnet) and file system searching (rg).\n - Sanitization: None identified; the skill processes discovered project metadata through standard CLI tool invocations.
Audit Metadata