skills/stuartf303/vandaemon/dotnet/Gen Agent Trust Hub

dotnet

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides numerous shell commands for building, running, and managing .NET applications. These include dotnet build, dotnet run, dotnet test, and troubleshooting commands like taskkill /PID <pid> /F and rm -rf for cleaning build artifacts. These are consistent with the skill's primary purpose of environment management.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to interact with codebase files and project configurations which may contain untrusted content, and it has the capability to execute commands via the Bash tool.
  • Ingestion points: The agent reads solution files (.sln), project files (.csproj), configuration files (appsettings.json), and C# source code.
  • Boundary markers: There are no explicit instructions or delimiters provided to prevent the agent from interpreting instructions that might be embedded within the processed project files.
  • Capability inventory: The skill allows full shell access through the Bash tool, enabling significant system interaction.
  • Sanitization: No sanitization or validation logic is present for data ingested from external files.
  • [EXTERNAL_DOWNLOADS]: The skill references external package management and deployment services. It uses dotnet add package to fetch NuGet packages and flyctl for cloud deployment. These operations target well-known, established services and official package registries.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 07:57 PM