skills/microsoft/aspire-skills/aspire/Gen Agent Trust Hub

aspire

Pass

Audited by Gen Agent Trust Hub on Nov 4, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • External Downloads and Remote Execution: The skill includes instructions for installing the Aspire CLI using a shell script (https://aspire.dev/install.sh) piped to a shell. This is a common installation pattern for development tools and is sourced from the official domain for the product.
  • Command Execution: The workflow involves executing various CLI commands (aspire start, aspire describe, aspire logs) to interact with the application host. These are standard operations required for the skill's primary purpose of application management.
  • Node.js Package Usage: The skill recommends using the @microsoft/aspire-cli package from the vendor's official registry, which is a routine practice for installing specialized development extensions.
  • Indirect Prompt Injection Surface: The skill processes local project metadata and runtime telemetry such as logs and traces. This is an expected capability for a monitoring and orchestration tool.
  • Ingestion points: Project files (.csproj, apphost.mts) and runtime log output from aspire logs.
  • Boundary markers: The skill uses a routing table to direct specific tasks to specialized sub-skills, which helps in maintaining clear operational boundaries.
  • Capability inventory: Access to system commands via the Aspire CLI for lifecycle management and resource inspection.
  • Sanitization: As a top-level router, the skill directs tasks to specialized handlers; developers should ensure that those sub-skills include appropriate validation for the data they process.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 4, 2026, 01:51 AM