dotnet-test-audit
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structured guidance for .NET test auditing without introducing any malicious code, obfuscation, or unauthorized data access patterns.
- [COMMAND_EXECUTION]: The skill instructions involve running standard .NET test runners such as VSTest, Microsoft.Testing.Platform, and Expecto, as well as mutation testing tools like Stryker.NET. These operations are within the expected scope for the skill's stated purpose of validating and auditing test suites.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external repository data, including test source code, repository instructions, and CI configurations (SKILL.md, references/suite-audit.md). While this involves processing untrusted data, the instructions prioritize analytical auditing and maintaining existing project boundaries, which mitigates the risk of the agent treating data as instructions.
- Ingestion points: Repository instructions, test projects, and CI selection.
- Boundary markers: Not explicitly defined in instructions.
- Capability inventory: Execution of test runners via shell, file system read for auditing, and file system write for authorized cleanup.
- Sanitization: Not explicitly mentioned; however, the skill focuses on static reasoning and controlled execution.
Audit Metadata