skills/microsoft/aspire-skills/aspire/Gen Agent Trust Hub

aspire

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Remote Code Execution Pattern: The skill documentation includes an installation command that downloads and executes a shell script from a remote URL.
  • Evidence: curl -sSL https://aspire.dev/install.sh | bash (in SKILL.md under Prerequisites).
  • Context: Executing a remote script via shell is a common pattern for installing CLI tools but is a security consideration because it runs external code. In this case, the script is the official installation utility for the .NET Aspire CLI, hosted on the product's official domain.
  • External Resource References: The skill provides links to external websites for downloading the .NET SDK and Aspire-related tools.
  • Evidence: https://dotnet.microsoft.com/download and https://aspire.dev/install.sh (in SKILL.md).
  • Context: Fetching development tools from external sources is a routine operation. The URLs provided in this skill point to verified domains managed by the product's vendor.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 12:48 AM