aspire-init

Pass

Audited by Gen Agent Trust Hub on Jun 12, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [Remote Code Execution]: The skill provides instructions to install the Aspire CLI by downloading a script from https://aspire.dev/install.sh and piping it to a shell. While executing remote scripts is a pattern to be aware of, this is an official installation path provided by the vendor.
  • [External Download]: The skill references external downloads for the .NET SDK and the Aspire CLI from dotnet.microsoft.com and aspire.dev. These sources are the official domains associated with the technology stack and the vendor.
  • [Command Execution]: The skill executes command-line tools like aspire init, aspire new, and dotnet tool install. These commands are standard for project scaffolding and managing the development environment as described in the skill's purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 12, 2026, 09:06 PM
Security Audit — agent-trust-hub — aspire-init