applicationinsights-setup
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Project Configuration Access: The skill analyzes files such as .csproj, appsettings.json, and Web.config within the user's workspace to detect the application type and current telemetry configuration. This access is necessary for providing accurate setup and migration instructions.\n- Standard Command Execution: The skill utilizes common developer tools by suggesting dotnet add package and Install-Package commands. These actions are intended to help the user manage project dependencies and are within the expected behavior of a development assistant.\n- External Dependency Management: It recommends installing official libraries from Microsoft and OpenTelemetry via the NuGet package manager. All suggested packages are standard for .NET observability and originate from well-known, trusted sources.\n- Indirect Prompt Injection Surface: As a tool that interprets project files and source code, it possesses an inherent attack surface for indirect prompt injection. Maliciously crafted content in scanned files could theoretically influence agent behavior, though the skill's reliance on structured project analysis and established patterns helps mitigate this risk.
Audit Metadata