aspire-orchestration

Pass

Audited by Gen Agent Trust Hub on Jul 31, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • Remote Code Execution Pattern: The skill references an installation command that fetches a script from aspire.dev and pipes it to the shell. This is a common pattern for installing CLI tools and, while it requires trust in the source, it targets the official domain for .NET Aspire and is part of the documented prerequisites.
  • Background Process Management: Instructions in the skill guide the agent to use background execution modes (such as aspire start) to avoid blocking the terminal. While this prevents the agent from displaying real-time terminal output to the user, it is a standard operational requirement for AI agents running in non-interactive environments.
  • Indirect Prompt Injection Surface: The skill identifies project types by scanning local repository files like .csproj or apphost.cs and subsequently executes commands based on that information. This represents an attack surface where specifically crafted files in a repository could influence agent actions, a typical characteristic of automated development tools.
  • Lifecycle Command Execution: The skill is designed to invoke local CLI tools such as aspire and dotnet. These capabilities are necessary for its primary function of managing application services, resources, and secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 31, 2026, 10:40 AM
Security Audit — agent-trust-hub — aspire-orchestration