dotnet-inspect-signals
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the
dnxtool runner to executedotnet-inspect. This is the primary mechanism for auditing .NET libraries and NuGet packages for security signals such as P/Invoke usage and SourceLink integrity. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data in the form of NuGet packages (e.g.,
Microsoft.Extensions.AI) and compiled DLL files (e.g.,MyLib.dll). - Ingestion points: The skill ingests package names and library file paths for analysis within
SKILL.md. - Boundary markers: The instructions do not define delimiters or specific safety instructions for the agent to ignore potentially malicious content found within the analyzed metadata or assembly attributes.
- Capability inventory: The skill utilizes the
dnxCLI to perform deep inspections of binary files and dependencies. - Sanitization: No explicit sanitization of input package names or binary content is specified in the skill's instructions.
Audit Metadata