dotnet
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill acts as a comprehensive documentation and guidance suite for .NET engineering. It explicitly instructs the agent to follow security best practices, such as using framework-provided security primitives rather than implementing custom cryptography, and parameterizing all database queries to prevent injection attacks. The technical references provided are standard for professional software development.- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to process external data sources which could contain malicious instructions.
- Ingestion points: The agent is directed to read repository-specific instructions and task descriptions in 'SKILL.md' and 'references/review.md'.
- Boundary markers: The skill provides an 'Instruction precedence' section in 'SKILL.md' to prioritize security and explicit task requirements.
- Capability inventory: The agent uses standard developer tools such as 'dotnet build', 'dotnet test', and 'dotnet format' as noted in the 'Validation' section of 'SKILL.md'.
- Sanitization: The 'references/security.md' file provides extensive guidance on treating external input as untrusted and validating data at resource boundaries.
Audit Metadata