template-comparison
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the agent to run the
dotnetCLI locally to inspect template metadata and parameters. - Evidence: Step 1 in SKILL.md directs the agent to run
dotnet new <template> --helpto collect template information. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources such as command outputs and template configuration files, which constitutes a potential attack surface.
- Ingestion points: The skill captures output from
dotnet new --helpand reads.csprojfiles from installed template packages (SKILL.md). - Boundary markers: The instructions do not include specific delimiters or guidelines for the agent to distinguish between template metadata and instructions.
- Capability inventory: The skill utilizes shell execution for the
dotnetCLI to perform its primary function. - Sanitization: There is no explicit sanitization or filtering of the captured output before it is integrated into the agent's context.
Audit Metadata