verify-samples-tool
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill details how to use
dotnet runto execute the verification tool and target specific sample projects. This is a standard operation for developer tools designed to test and validate code within a local repository. - Environment Variable Management: The tool requires
AZURE_OPENAI_ENDPOINTand other configuration variables to function. The documentation follows security best practices by instructing users to set these as environment variables rather than hardcoding sensitive values into the source code. - Indirect Prompt Injection Surface: The tool utilizes an AI-powered verification agent to evaluate the output of sample projects based on semantic descriptions. Because the AI processes output from potentially diverse samples, there is a theoretical surface where sample output could influence the verification agent's reasoning. This is a common characteristic of AI-based testing frameworks and is mitigated by the tool's intended use for verifying known samples within a trusted development environment.
Audit Metadata