generating-dotnet-sdks

Pass

Audited by Gen Agent Trust Hub on Apr 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill guides the user to install the autosdk.cli global .NET tool from NuGet and provides examples for downloading OpenAPI specifications from external URLs.
  • [COMMAND_EXECUTION]: Instructions involve running several shell commands such as dotnet tool install, curl, and autosdk generate to manage the SDK generation pipeline.
  • [CREDENTIALS_UNSAFE]: The documentation references the use of OPENAI_API_KEY and FIRECRAWL_API_KEY environment variables for configuration. It correctly suggests using environment variables rather than hardcoding secrets.
  • [DATA_EXFILTRATION]: The autosdk ai spec-from-docs feature sends URL content to Firecrawl and OpenAI services for spec generation, which is a disclosed and intended part of the tool's AI-powered functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 17, 2026, 09:54 PM