template-discovery
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
dotnetCLI to perform template discovery. It executes commands such asdotnet new search,dotnet new list,dotnet new <template> --help, anddotnet new <template> --dry-run. These commands are scoped to information retrieval and previewing project structures without making persistent changes to the filesystem beyond standard CLI caching. - [INDIRECT_PROMPT_INJECTION]: The skill accepts natural-language descriptions as input to resolve them to specific templates.
- Ingestion points: User-provided 'User intent or keywords' described in the Inputs section of
SKILL.md. - Boundary markers: None explicitly defined in the instructions to separate user input from the rest of the prompt.
- Capability inventory: Execution of
dotnet newsubcommands (search, list, help, dry-run) as detailed in the Workflow section ofSKILL.md. - Sanitization: The skill employs a static 'Intent → template short name(s)' mapping table in Step 1, which acts as a normalization layer for user input before command construction.
- [EXTERNAL_DOWNLOADS]: The skill facilitates searching for external templates via
dotnet new search. This command queries NuGet.org, which is a well-known and standard registry for .NET development resources.
Audit Metadata