aspire-cli
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the official installation script for the .NET Aspire CLI at https://aspire.dev/install.sh.\n- [COMMAND_EXECUTION]: Provides detailed workflows for executing
aspireanddotnetcommands to manage application lifecycles, run diagnostics (aspire do diagnostics), and perform resource-context executions (aspire exec).\n- [REMOTE_CODE_EXECUTION]: Describes the implementation of a .NET 10 proxy script (aspire-mcp-proxy.cs) which utilizes native scripting features to dynamically load NuGet dependencies via#:packagedirectives at runtime.\n- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it is designed to ingest and display untrusted application logs and OTLP telemetry through MCP tools.\n - Ingestion points: Resource console logs and structured logs read by the MCP server tools (references/mcp-server-and-resource-access.md).\n
- Boundary markers: Absent; instructions do not specify delimiting or ignoring instructions within the ingested log content.\n
- Capability inventory: Includes shell command execution (
aspire run,aspire exec) and browser automation capabilities (playwright-cli).\n - Sanitization: Absent; application output is treated as diagnostic data for the user/agent.
Audit Metadata