dotnet-core-expert
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The workflow includes running
dotnet buildanddotnet testto verify the generated code. These are standard development operations for a coding assistant and are restricted to the local environment. - [EXTERNAL_DOWNLOADS]: The skill references official Microsoft Docker images (
mcr.microsoft.com) and standard ecosystem packages (e.g., MediatR, Serilog, FluentValidation). These are well-known, trusted sources. - [CREDENTIALS_UNSAFE]: Security-sensitive values in the provided templates (e.g., JWT secrets and database passwords) use explicit placeholders like
your-super-secret-key-minimum-32-characters. The skill also correctly instructs users to manage real credentials via environment variables and secure secret stores. - [DYNAMIC_EXECUTION]: The agent generates C# code and subsequently uses the .NET CLI to compile and test it. This functionality is the primary purpose of the skill and follows standard practices for software development agents.
- [DATA_EXFILTRATION]: No unauthorized network communication or exfiltration patterns were detected. Mentions of
curlare limited to local API verification.
Audit Metadata