system-text-json-net11
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill contains instructions to download the official .NET installation scripts from Microsoft's dot.net domain. These scripts are used to ensure the correct environment is available to validate code samples.
- Evidence: PowerShell script downloads from
https://dot.net/v1/dotnet-install.ps1in SKILL.md. - Evidence: Bash script downloads from
https://dot.net/v1/dotnet-install.shin SKILL.md. - [REMOTE_CODE_EXECUTION]: The skill provides commands to execute the downloaded setup scripts from the official Microsoft source. This behavior is intended for environment provisioning and is targeted at a well-known service.
- Evidence:
bash "$install_script" --channel 11.0in SKILL.md. - Evidence:
& $installScript -Channel 11.0in SKILL.md. - [COMMAND_EXECUTION]: The skill instructs the agent to run the
dotnetCLI to validate generated code samples. This is a standard operation for a development-focused skill. - Evidence: Use of
dotnet run --project <PATH_TO_NET11_PROJECT>to verify output. - [SAFE]: The skill explicitly instructs the agent to avoid requiring administrator access, avoid changing the machine-wide PATH, and use temporary directories for installation scripts, which aligns with security best practices for automated environment setup.
Audit Metadata