dotnet-aspire
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard .NET and Aspire CLI commands (e.g.,
dotnet build,dotnet test,aspire run,aspire agent init) to orchestrate the local development and testing environment. These operations are essential to the skill's primary function. - [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of official Aspire Project Templates and Aspire AI agent skills from Microsoft. It adheres to strict rules requiring explicit user consent before performing any machine-wide modifications or changes to agent configurations.
- [SAFE]: Features a dedicated C# utility (
devtoken.cs) for managing local JWT signing keys within the standard .NET User Secrets directory. The utility applies restricted file permissions on Unix-like systems and the skill mandates redacting sensitive information from all outputs. Additionally, it implements defensive measures like an outbound HTTP recording proxy and in-process request handlers to ensure environmental isolation during tests.
Audit Metadata