dotnet
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous shell commands for building, running, and managing .NET applications. These include
dotnet build,dotnet run,dotnet test, and troubleshooting commands liketaskkill /PID <pid> /Fandrm -rffor cleaning build artifacts. These are consistent with the skill's primary purpose of environment management. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to interact with codebase files and project configurations which may contain untrusted content, and it has the capability to execute commands via the
Bashtool. - Ingestion points: The agent reads solution files (
.sln), project files (.csproj), configuration files (appsettings.json), and C# source code. - Boundary markers: There are no explicit instructions or delimiters provided to prevent the agent from interpreting instructions that might be embedded within the processed project files.
- Capability inventory: The skill allows full shell access through the
Bashtool, enabling significant system interaction. - Sanitization: No sanitization or validation logic is present for data ingested from external files.
- [EXTERNAL_DOWNLOADS]: The skill references external package management and deployment services. It uses
dotnet add packageto fetch NuGet packages andflyctlfor cloud deployment. These operations target well-known, established services and official package registries.
Audit Metadata