csharp-developer
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external .NET project files, solution structures, NuGet packages, and source code for architectural review and implementation tasks. This creates a vulnerability surface where malicious instructions could be embedded within the processed code or configuration files to influence the agent's behavior.
- Ingestion points: Instructions in SKILL.md direct the agent to review
.csprojfiles, NuGet package lists, solution architecture, and C# source patterns from the local environment. - Boundary markers: There are no explicit instructions or delimiters provided to help the agent distinguish between data to be analyzed and instructions to be followed.
- Capability inventory: The skill is intended to perform code implementation, performance profiling, and project configuration, which implies file system read/write access and execution of development tooling.
- Sanitization: No sanitization, validation, or filtering logic is defined for the external content processed by the agent.
Audit Metadata