dotnet-solution-navigation
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill utilizes the
!commandsyntax to execute afindcommand at load time to automatically identify .NET solution files (.sln,.slnx) in the current directory. This is a legitimate use of the feature to provide immediate environmental context relevant to the skill's purpose. - [INDIRECT_PROMPT_INJECTION]: The skill involves reading and parsing file contents using tools like
grepand thedotnetCLI to identify entry points, configuration, and dependencies. This creates a surface where malicious instructions embedded in project files could influence the agent's behavior. - Ingestion points: Files like
Program.cs,.csproj,.sln, andappsettings.json(SKILL.md). - Boundary markers: None identified; instructions do not explicitly warn the agent to ignore instructions embedded in the project files.
- Capability inventory: The skill uses
find,grep,ls, and thedotnetCLI to read files and query project metadata. - Sanitization: None identified; the skill directly processes the output of these commands.
- [COMMAND_EXECUTION]: The skill provides numerous shell command examples using
find,grep, anddotnetfor solution exploration. These are standard developer operations and do not include patterns for exfiltration or sensitive credential access.
Audit Metadata