dotnet-audit-trail
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill implements an
AuditLogInterceptorthat records entity changes into anAuditLogtable. This creates a surface for indirect prompt injection, where malicious strings stored in application entities are propagated into audit logs that may be processed by agents or administrators later. - Ingestion points: Data is ingested from entity properties in
AuditLogInterceptor.csduring the EF CoreSavingChangesAsyncevent. - Boundary markers: The skill uses
JsonSerializer.Serializeto wrap changed values, providing a structural JSON boundary. - Capability inventory: The skill uses Entity Framework Core to perform write operations to the database.
- Sanitization: While values are serialized to JSON, the skill does not perform content-based filtering or sanitization of the values themselves.
Audit Metadata