dotnet-csharp-source-generators

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a technical guide for C# source generators. It contains boilerplate project configurations, code snippets for incremental generators, and testing patterns that align with official Microsoft documentation.
  • [EXTERNAL_DOWNLOADS]: References official NuGet packages and documentation from trusted sources including Microsoft and the .NET Foundation. These references are used for standard dependency management and documentation purposes.
  • [COMMAND_EXECUTION]: Includes code snippets for debugging using a debugger launch command. This is a routine development practice for troubleshooting compiler extensions and is appropriately gated by preprocessor directives.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes a pattern for processing code inputs to generate new source files. It provides guidance on input validation and diagnostic reporting, which addresses the security surface where untrusted user code is processed by the generator.
  • Ingestion points: context.SyntaxProvider and CSharpSyntaxTree.ParseText in SKILL.md
  • Boundary markers: The guidance suggests reporting diagnostics for unsupported shapes rather than emitting invalid code.
  • Capability inventory: context.AddSource and RunGeneratorsAndUpdateCompilation methods in SKILL.md
  • Sanitization: Basic property name derivation and symbol display formatting logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 07:31 AM
Security Audit — agent-trust-hub — dotnet-csharp-source-generators