dotnet-best-practices
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through the analysis of project source code.
- Ingestion points: Project source code and solution files specified in the selected scope (SKILL.md).
- Boundary markers: Absent; there are no specific delimiters or instructions to the agent to ignore potentially malicious instructions embedded in the code being reviewed.
- Capability inventory: The agent is authorized to modify source code and execute local validation commands (build, lint, test).
- Sanitization: Absent; the skill does not specify any filtering or sanitization for code content before processing.
- [COMMAND_EXECUTION]: The verification protocol instructs the agent to perform local validation.
- Evidence: The 'Verification Protocol' in SKILL.md requires that 'Build, lint, test, or equivalent local validation is run for the changed surface.' while also requiring that implementations map to a specific command or artifact.
Audit Metadata