shiny-mediator
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive instructions for implementing the Shiny Mediator library in .NET applications. It correctly identifies and explains critical library requirements, such as the
partialclass requirement for middleware-decorated handlers to support source generation. - [SAFE]: The skill instructions emphasize security and best practices for modern .NET development, including AOT (Ahead-of-Time) and trimming compatibility, use of
IMediatorContextfor scoped operation chaining, and properCancellationTokenpropagation. - [SAFE]: Data processing instructions focus on standard serialization practices using
System.Text.Jsonand provide clear guidance on maintaining AOT safety viaJsonSerializerContext. - [SAFE]: The AI Tools integration instructions properly utilize the
Microsoft.Extensions.AIlibrary for exposing mediator contracts as AI-callable tools with structured JSON schemas, following standard vendor integration patterns. - [SAFE]: Network-related features (HTTP clients, OpenAPI scaffolding, and Server-Sent Events) follow established .NET patterns using
IHttpClientFactoryand standard ASP.NET Core routing, with no evidence of unexpected network behavior or data exfiltration. - [SAFE]: The deterministic static detector flagged a potential prompt injection/concealment pattern, but analysis confirms this is a false positive triggered by documentation regarding how logging and configuration can be optionally skipped or suppressed at the application level during library setup, which is standard framework behavior.
Audit Metadata