dotnet-skills-feedback
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE]: The skill instructs the agent to capture system details such as .NET SDK/runtime versions, target frameworks, and library versions to populate a bug report. The instructions explicitly mandate the removal of credentials and unrelated private source code before generating the output.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user data (observed behavior, user requests) to generate report content. While this creates a data ingestion surface, the risk is mitigated by the instruction to present the draft for human review and the lack of automated execution or submission capabilities.
- [SAFE]: The destination URL for the bug reports is a GitHub repository belonging to the author's own infrastructure, which is consistent with the skill's stated purpose.
Audit Metadata