winforms
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for installing and using the .NET Upgrade Assistant via
dotnet tool install -g upgrade-assistant. It also outlines the use of standard development and diagnostic commands such asdotnet new,dotnet publish,dotnet-svcutil, anddotnet-countersfor project management and analysis. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and modify existing source code and project configuration files (e.g.,
.csproj,.cs,.resx) as seen inreferences/migration.md. - Ingestion points: Local repository files including C# source files, resource files, and project project definitions.
- Boundary markers: None explicitly defined in the instructions to differentiate between user-supplied project data and skill logic.
- Capability inventory: The skill utilizes shell-based build, test, and analysis tools (
dotnet,upgrade-assistant). - Sanitization: No explicit sanitization or validation logic is applied to the ingested repository content before processing.
- Risk Factor: While these surfaces could theoretically be used for indirect injection, the risk is inherent to the modernization task and the tools used are standard for the development environment.
Audit Metadata