testcontainers-dotnet
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection as it facilitates the generation of executable code and infrastructure configuration based on untrusted user inputs.
- Ingestion points: The 'What I Need From You' checklist in
SKILL.mdrequests user input for image tags, environment variables, and readiness signals (which can include commands) to be interpolated into code templates. - Boundary markers: The skill does not define or recommend the use of delimiters or 'ignore embedded instructions' warnings for the data it processes.
- Capability inventory: The generated code templates in
SKILL.mdutilizeContainerBuilderto create system resources,ExecAsyncto execute arbitrary commands inside containers, and various network client libraries to perform network operations. - Sanitization: There are no instructions or examples demonstrating the sanitization, validation, or escaping of user-provided data before it is used in code generation.
Audit Metadata