dotnet-cli-packaging
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill provides legitimate templates and guidelines for packaging .NET applications across multiple platforms.
- [COMMAND_EXECUTION]: Provides standard command-line instructions for building and publishing packages using industry-standard tools like
dotnet,dpkg-deb,choco, andbrew. These commands are appropriate for the skill's stated purpose of software packaging. - [PRIVILEGE_ESCALATION]: Documents the use of
sudo dpkg -ifor installing Debian packages, which is the standard and expected procedure for system-level package installation on Linux. - [CREDENTIALS_UNSAFE]: The skill explicitly advises users to avoid hardcoding secrets and provides examples using environment variables (e.g.,
$NUGET_API_KEY,$env:CHOCO_API_KEY) for API keys, adhering to secure configuration management practices. - [EXTERNAL_DOWNLOADS]: Includes template URLs for downloading release artifacts from GitHub. These are provided as placeholders for the user's infrastructure and are consistent with standard software distribution workflows.
Audit Metadata