dotnet-inspect-sourcelink
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
dnx dotnet-inspectcommand-line tool to analyze .NET assemblies and retrieve SourceLink metadata. - [EXTERNAL_DOWNLOADS]: The skill downloads original source code bodies from remote repositories based on URLs found in PDB files, which is the primary intended function of SourceLink resolution.
- [PROMPT_INJECTION]: As the skill ingests external source code for agent processing, it possesses an indirect prompt injection surface. This is an inherent risk of code-reading skills where instructions could be embedded in comments or code within the fetched files.
- Ingestion points: Fetched source code bodies (SKILL.md).
- Boundary markers: None specified.
- Capability inventory: Shell command execution via
dnx(SKILL.md). - Sanitization: None specified.
Audit Metadata