dotnet-project-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses a dynamic shell command (
find) at load time to automatically identify .NET solution and project files within the workspace. This is used to provide the agent with immediate context regarding the project structure. - Evidence: The command
find . -maxdepth 3 \( -name "*.csproj" -o -name "*.sln" -o -name "*.slnx" \) 2>/dev/null | head -20is executed upon loading the skill. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves reading and parsing numerous untrusted local files, such as solution files, project files (.csproj), and build configurations (Directory.Build.props, nuget.config). This creates a surface where an attacker could place malicious instructions inside comments or metadata of those files to manipulate the agent's logic during analysis.
- Ingestion points: Solution files (.sln, .slnx), project files (.csproj), build properties (Directory.Build.props/targets), package manifests (Directory.Packages.props), and configuration files (.editorconfig, nuget.config, global.json).
- Boundary markers: The instructions do not specify any delimiters or warnings to ignore instructions that might be embedded within these files.
- Capability inventory: While the skill focuses on analysis, the extracted information (like project dependencies or entry points) may be used by the agent to perform subsequent actions like building or running code.
- Sanitization: There is no instruction to sanitize or validate the content extracted from the project files before processing or reporting.
Audit Metadata