write-script-csharp
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes script metadata and input schemas which can include a
prompt_for_aifield. This field is intended to provide instructions to the agent when choosing inputs, representing a surface where untrusted data could influence agent behavior. - Ingestion points: Script input parameters and the
prompt_for_aimetadata field in.script.yamlfiles. - Boundary markers: No specific delimiters or safety instructions are defined for the interpolation of the
prompt_for_aicontent. - Capability inventory: The agent can execute
wmillCLI commands includingscript preview,script run, andsync pushwhich interact with the local filesystem and the Windmill platform. - Sanitization: The instructions do not specify sanitization or validation for the
prompt_for_aifield before it is used by the AI agent. - [COMMAND_EXECUTION]: The skill uses the
wmillCLI tool to perform operations. Thewmill script previewcommand executes the script code locally to validate functionality, which may result in side effects as noted in the instructions. - [DYNAMIC_EXECUTION]: The skill is specifically designed to facilitate the creation and runtime execution of C# scripts. It uses the
#r "nuget: ..."directive for dynamic package resolution and executes scripts via thewmillCLI during the development and testing workflow.
Audit Metadata