aspire-orchestration
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- Official Installation Script: The skill documents a prerequisite installation command using
curlpiped tobashfromaspire.dev. While piped shell execution is a sensitive pattern, this domain is the official resource for the Microsoft .NET Aspire project, making this a standard and verified bootstrap method for the required CLI tools. - Background Process Management: The instructions direct the agent to use background execution modes (e.g.,
aspire start) to manage application hosts. While automated scanners may flag this as a concealment pattern, it is a standard operational requirement for AI agents to prevent terminal blocking and ensure continued responsiveness while local services are running. - Verified Vendor Tooling: The skill utilizes official dependencies including the
@microsoft/aspire-cliNPM package and theAspire.Cli.NET tool. These resources originate from the verified vendor (Microsoft) and are necessary for the orchestration tasks the skill performs.
Audit Metadata