The Agent Skills Directory

Safe Scripting and Tools: The skill utilizes standard .NET development tools and commands (e.g., dotnet build, dotnet test, git) to perform upgrades. All external downloads or package installations target well-known and trusted registries like NuGet (via PackageReference) or official Microsoft repositories. No arbitrary remote code execution or suspicious obfuscation patterns were found.
Explicit Security Handling: The skill explicitly includes a section in assessment.md for detecting and presenting package vulnerabilities (CVEs) to the user, ensuring they are addressed as part of the upgrade process. This is a proactive security feature rather than a vulnerability.
Credential Safety: The instructions do not request or hardcode sensitive information. It correctly suggests using .env files or standard configuration management practices where applicable, following security best practices.
Controlled Execution Environment: The skill uses confirm_options and human-in-the-loop checkpoints (Guided mode) to ensure the user reviews major changes like target framework selection and strategy before execution, preventing unintended automated modifications.

dotnet-version-upgrade