msbuild-modernization
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [Indirect Prompt Injection Surface]: The skill facilitates the transformation of existing project files, which represents a potential surface for indirect prompt injection if those files contain malicious instructions. 1. Ingestion points: .csproj, .vbproj, and packages.config files. 2. Boundary markers: The instructions do not explicitly define delimiters for untrusted content. 3. Capability inventory: The agent is guided to perform file read and write operations. 4. Sanitization: No specific sanitization steps are mentioned. This surface is inherent to the skill's primary purpose of file modernization and is mitigated by the agent's safety protocols.
- [Trusted Vendor Resources]: The skill correctly recommends the use of official Microsoft migration tools, such as the try-convert utility and .NET Upgrade Assistant, as well as official documentation, ensuring a reliable and safe workflow.
Audit Metadata