aspire-orchestration

Pass

Audited by Gen Agent Trust Hub on Nov 4, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • Official Installation Script: The skill documents a prerequisite installation command using curl piped to bash from aspire.dev. While piped shell execution is a sensitive pattern, this domain is the official resource for the Microsoft .NET Aspire project, making this a standard and verified bootstrap method for the required CLI tools.
  • Background Process Management: The instructions direct the agent to use background execution modes (e.g., aspire start) to manage application hosts. While automated scanners may flag this as a concealment pattern, it is a standard operational requirement for AI agents to prevent terminal blocking and ensure continued responsiveness while local services are running.
  • Verified Vendor Tooling: The skill utilizes official dependencies including the @microsoft/aspire-cli NPM package and the Aspire.Cli .NET tool. These resources originate from the verified vendor (Microsoft) and are necessary for the orchestration tasks the skill performs.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 4, 2026, 01:51 AM