dotnet-ado-build-test
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses script and DotNetCoreCLI tasks to execute shell commands for building, testing, and installing tools. This is standard behavior for CI/CD pipelines.
- [EXTERNAL_DOWNLOADS]: The skill demonstrates how to install the dotnet-reportgenerator-globaltool using dotnet tool install. While this fetches code from an external registry (NuGet), it is a standard practice for generating test reports.
- [INDIRECT_PROMPT_INJECTION]: A script for enforcing coverage thresholds interpolates a file path found at runtime into a Python script. While theoretically vulnerable to manipulation if an attacker can control the file system structure within the build agent, this is a low-risk pattern in the context of a build pipeline.
- Ingestion points: find command output in SKILL.md used to locate coverage files.
- Boundary markers: None present in the shell script.
- Capability inventory: Shell script execution (bash), Python execution, and NuGet tool installation.
- Sanitization: The file path variable is not sanitized before being passed to the Python interpreter.
Audit Metadata