winforms

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for installing and using the .NET Upgrade Assistant via dotnet tool install -g upgrade-assistant. It also outlines the use of standard development and diagnostic commands such as dotnet new, dotnet publish, dotnet-svcutil, and dotnet-counters for project management and analysis.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and modify existing source code and project configuration files (e.g., .csproj, .cs, .resx) as seen in references/migration.md.
  • Ingestion points: Local repository files including C# source files, resource files, and project project definitions.
  • Boundary markers: None explicitly defined in the instructions to differentiate between user-supplied project data and skill logic.
  • Capability inventory: The skill utilizes shell-based build, test, and analysis tools (dotnet, upgrade-assistant).
  • Sanitization: No explicit sanitization or validation logic is applied to the ingested repository content before processing.
  • Risk Factor: While these surfaces could theoretically be used for indirect injection, the risk is inherent to the modernization task and the tools used are standard for the development environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 04:03 PM