generating-dotnet-sdks
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill guides the user to install the
autosdk.cliglobal .NET tool from NuGet and provides examples for downloading OpenAPI specifications from external URLs. - [COMMAND_EXECUTION]: Instructions involve running several shell commands such as
dotnet tool install,curl, andautosdk generateto manage the SDK generation pipeline. - [CREDENTIALS_UNSAFE]: The documentation references the use of
OPENAI_API_KEYandFIRECRAWL_API_KEYenvironment variables for configuration. It correctly suggests using environment variables rather than hardcoding secrets. - [DATA_EXFILTRATION]: The
autosdk ai spec-from-docsfeature sends URL content to Firecrawl and OpenAI services for spec generation, which is a disclosed and intended part of the tool's AI-powered functionality.
Audit Metadata