dotnet-feature-workload
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides structured templates for C# and F# testing workloads. All referenced dependencies, including FsCheck and Microsoft.Extensions.TimeProvider.Testing, are standard, reputable packages from the .NET ecosystem. The code examples demonstrate benign testing logic for capacity constraints and timer boundaries. Furthermore, URLs referencing external documentation and source code target well-known repositories and official documentation sites.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow where the agent ingests project data to produce executable workloads. This represents a potential vulnerability surface common to code-analysis tools.
- Ingestion points: Reads feature code, nearby tests, project files, and package versions (SKILL.md).
- Boundary markers: None identified in the prompt templates.
- Capability inventory: Writing code to the filesystem and executing shell commands via
dotnet run(SKILL.md, assets/examples/README.md). - Sanitization: No specific sanitization or validation of the ingested code content is performed before processing.
Audit Metadata