dotnet-msbuild-tasks
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
ToolTaskexample demonstrates wrapping external CLI tools. While it usesCommandLineBuilderto help prevent argument injection, the fundamental capability allows for the execution of arbitrary executables specified in project files. - [DYNAMIC_EXECUTION]: The
CodeTaskFactorysection provides patterns for compiling and executing C# code directly from MSBuild XML. This allows for the generation and execution of code at build time, which could be exploited if an agent is tricked into injecting malicious fragments. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the processing of external data and files which serves as an injection surface.
- Ingestion points: Parameters such as
InputFile,SourceDirectory, andTemplatesdefined inSKILL.md. - Boundary markers: Absent; the provided code templates do not include logic to differentiate instructions from data in processed inputs.
- Capability inventory: Includes file system read/write operations (
File.ReadAllText/File.WriteAllText), process invocation (ToolTask), and build-time compilation (CodeTaskFactory). - Sanitization: CLI arguments are sanitized via
CommandLineBuilder, but file contents are processed directly without validation.
Audit Metadata