dotnet-inspect-compatibility

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill consists of documentation and usage examples for the dotnet-inspect utility. The functionality described is consistent with the stated purpose of analyzing software compatibility and changes.
  • [EXTERNAL_DOWNLOADS]: The instructions describe the tool's ability to fetch source code from raw.githubusercontent.com via SourceLink. This process is documented to include security measures such as checksum verification against PDB data before remote fetching occurs.
  • [INDIRECT_PROMPT_INJECTION]: The skill enables the agent to process external data, including NuGet packages, compiled DLLs, and remote source code. While this represents a surface for indirect prompt injection, the skill is designed for the explicit purpose of auditing such artifacts, incorporates checksum-based integrity checks for remote source acquisition, and does not perform high-risk autonomous actions based on the processed content.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 04:44 PM