aspire-orchestration
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- Remote Code Execution Pattern: The skill references an installation command that fetches a script from
aspire.devand pipes it to the shell. This is a common pattern for installing CLI tools and, while it requires trust in the source, it targets the official domain for .NET Aspire and is part of the documented prerequisites. - Background Process Management: Instructions in the skill guide the agent to use background execution modes (such as
aspire start) to avoid blocking the terminal. While this prevents the agent from displaying real-time terminal output to the user, it is a standard operational requirement for AI agents running in non-interactive environments. - Indirect Prompt Injection Surface: The skill identifies project types by scanning local repository files like
.csprojorapphost.csand subsequently executes commands based on that information. This represents an attack surface where specifically crafted files in a repository could influence agent actions, a typical characteristic of automated development tools. - Lifecycle Command Execution: The skill is designed to invoke local CLI tools such as
aspireanddotnet. These capabilities are necessary for its primary function of managing application services, resources, and secrets.
Audit Metadata