asp-net-core-identity-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill demonstrates safe credential management by using
builder.Configurationand explicitly listing 'Storing secrets in code' as an anti-pattern. It recommends industry standards like User Secrets and Azure Key Vault. - [COMMAND_EXECUTION]: The skill includes a standard
dotnet aspnet-codegeneratorcommand for scaffolding identity pages. This is a legitimate development task and does not involve malicious intent or user-input injection. - [PROMPT_INJECTION]: The instructions follow a standard persona for a security architect and do not attempt to bypass agent safety filters or override system instructions.
- [SAFE]: The code snippets provided implement robust security controls including HTTPS enforcement (
UseHsts,UseHttpsRedirection), CSRF protection (SameSiteMode.Strict), and secure cookie configurations (HttpOnly,SecurePolicy). - [REMOTE_CODE_EXECUTION]: No remote script downloads or piped command executions are present. All referenced libraries are standard .NET ecosystem packages.
Audit Metadata