template-comparison

Pass

Audited by Gen Agent Trust Hub on Oct 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill requires the agent to run the dotnet CLI locally to inspect template metadata and parameters.
  • Evidence: Step 1 in SKILL.md directs the agent to run dotnet new <template> --help to collect template information.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources such as command outputs and template configuration files, which constitutes a potential attack surface.
  • Ingestion points: The skill captures output from dotnet new --help and reads .csproj files from installed template packages (SKILL.md).
  • Boundary markers: The instructions do not include specific delimiters or guidelines for the agent to distinguish between template metadata and instructions.
  • Capability inventory: The skill utilizes shell execution for the dotnet CLI to perform its primary function.
  • Sanitization: There is no explicit sanitization or filtering of the captured output before it is integrated into the agent's context.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 11, 2026, 05:11 AM