scaffold-dotnet-test-project
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- Indirect Prompt Injection Surface: The skill provides a mechanism to read repository-specific instructions from a local file (
.agents/skill-overlays/dotnet-test/scaffold-dotnet-test-project.md). While this is a common feature for customizing agent behavior, it represents an entry point where external repository content can influence the agent's workflow. - Ingestion points: The
.agents/skill-overlays/dotnet-test/scaffold-dotnet-test-project.mdfile located at the repository root. - Boundary markers: The skill requires specific frontmatter validation and mandates that explicit user instructions override overlay settings.
- Capability inventory: Uses the
dotnetCLI for file modifications and test execution within the repository scope. - Sanitization: Content is used as instructional guidance and is subject to the skill's defined workflow and safety checks.
- Project Management Command Execution: The skill executes various
.NET CLIcommands (dotnet new,dotnet add,dotnet sln,dotnet test) to automate the creation and configuration of test projects. These are standard operations for .NET development and are constrained to the current repository's context.
Audit Metadata