dotnet-test-triage
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted external data, including test logs, execution traces, and runner results, which could contain adversarial content. 1. Ingestion points: SKILL.md specifies reading runner results, logs, traces, and source code. 2. Boundary markers: No explicit delimiters or warnings for embedded instructions are specified in the triage workflow. 3. Capability inventory: The skill describes using diagnostic tools like dotnet-trace, dotnet-dump, and dotnet-counters for investigation. 4. Sanitization: No sanitization or filtering of processed log content is mentioned.
- [EXTERNAL_DOWNLOADS]: The skill references documentation and diagnostic resources from trusted organizations including Microsoft (.NET diagnostics) and the FsCheck project.
Audit Metadata