verify-samples-tool

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • Command Execution: The skill details how to use dotnet run to execute the verification tool and target specific sample projects. This is a standard operation for developer tools designed to test and validate code within a local repository.
  • Environment Variable Management: The tool requires AZURE_OPENAI_ENDPOINT and other configuration variables to function. The documentation follows security best practices by instructing users to set these as environment variables rather than hardcoding sensitive values into the source code.
  • Indirect Prompt Injection Surface: The tool utilizes an AI-powered verification agent to evaluate the output of sample projects based on semantic descriptions. Because the AI processes output from potentially diverse samples, there is a theoretical surface where sample output could influence the verification agent's reasoning. This is a common characteristic of AI-based testing frameworks and is mitigated by the tool's intended use for verifying known samples within a trusted development environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 09:55 PM