skills/microsoft/testfx/run-tests/Gen Agent Trust Hub

run-tests

Pass

Audited by Gen Agent Trust Hub on Nov 4, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • Repository-Provided Overlays: The skill is configured to discover and apply instructions from a file located within the repository being analyzed (.agents/skill-overlays/dotnet-test/run-tests.md). This mechanism allows repository-specific configurations to override or extend the skill's default behavior. While the skill includes frontmatter validation checks for these overlays, the ingestion of untrusted data from a repository to influence command generation is a potential surface for indirect prompt injection.
  • Command Execution: The primary function of this skill involves identifying and executing shell commands from the .NET ecosystem, such as dotnet test, MSBuild.exe, and vstest.console.exe. Users should review the generated commands before execution, as the skill translates repository metadata into active operations in the shell environment.
  • Local File Inspection: To determine the correct test environment, the skill reads various configuration files including global.json, project files (.csproj), and package manifests. This is a standard and necessary discovery process for automated testing, though it involves broad read access to the project structure.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 4, 2026, 05:47 PM