dotnet-health-audit
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches resources from trusted and well-known domains, including Microsoft's official .NET installation site and the vendor's own GitHub repositories.
- [COMMAND_EXECUTION]: Executes standard development toolchain commands including
dotnetandgitto perform repository inventory, build verification, and test execution. - [REMOTE_CODE_EXECUTION]: Downloads and executes the official .NET SDK installer from Microsoft. This is a common and trusted pattern for environment setup.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted source code and configuration files from the repository being audited. It mitigates risk through explicit instructions to be evidence-based and objective, focusing on technical metrics rather than natural language instructions found in data.
- [SAFE]: The skill implements security-positive features, such as auditing for vulnerable packages and ensuring secrets are denied access in the agent's configuration.
Audit Metadata