run-tests
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- Repository-Provided Overlays: The skill is configured to discover and apply instructions from a file located within the repository being analyzed (
.agents/skill-overlays/dotnet-test/run-tests.md). This mechanism allows repository-specific configurations to override or extend the skill's default behavior. While the skill includes frontmatter validation checks for these overlays, the ingestion of untrusted data from a repository to influence command generation is a potential surface for indirect prompt injection. - Command Execution: The primary function of this skill involves identifying and executing shell commands from the .NET ecosystem, such as
dotnet test,MSBuild.exe, andvstest.console.exe. Users should review the generated commands before execution, as the skill translates repository metadata into active operations in the shell environment. - Local File Inspection: To determine the correct test environment, the skill reads various configuration files including
global.json, project files (.csproj), and package manifests. This is a standard and necessary discovery process for automated testing, though it involves broad read access to the project structure.
Audit Metadata