umbraco-add-extension-reference
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill discovers and reads project files (
.csproj,.sln) from the local workspace to determine project structure. Ingestion points: Workspace files accessed viaGlobandReadtools. Boundary markers: None present; the skill assumes valid project XML structure. Capability inventory: UsesEditfor file modification andBashfor command execution. Sanitization: Content from project files is interpolated into XML and shell commands without explicit sanitization. - [COMMAND_EXECUTION]: The skill uses
Bashto executedotnet sln addusing paths discovered in the workspace. While this is a standard project management task, it relies on file paths that could be manipulated in a malicious workspace.
Audit Metadata