aspire
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Remote Code Execution Pattern: The skill documentation includes an installation command that downloads and executes a shell script from a remote URL.
- Evidence:
curl -sSL https://aspire.dev/install.sh | bash(inSKILL.mdunder Prerequisites). - Context: Executing a remote script via shell is a common pattern for installing CLI tools but is a security consideration because it runs external code. In this case, the script is the official installation utility for the .NET Aspire CLI, hosted on the product's official domain.
- External Resource References: The skill provides links to external websites for downloading the .NET SDK and Aspire-related tools.
- Evidence:
https://dotnet.microsoft.com/downloadandhttps://aspire.dev/install.sh(inSKILL.md). - Context: Fetching development tools from external sources is a routine operation. The URLs provided in this skill point to verified domains managed by the product's vendor.
Audit Metadata