ilspy-decompile
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
dnxcommand-line tool. The tool definitionBash(dnx:*)provides the agent with the permission to execute theilspycmdsuite and associated arguments for assembly analysis. - [PROMPT_INJECTION]: This skill exposes an indirect prompt injection surface as it analyzes external binary data (.dll files).
- Ingestion points: The skill reads assemblies from NuGet package directories and local build folders (SKILL.md).
- Boundary markers: The skill does not use specific delimiters or include explicit instructions for the agent to ignore any natural language instructions that might be embedded within the decompiled output.
- Capability inventory: The skill possesses command execution capabilities via the
dnxtool (SKILL.md). - Sanitization: There is no evidence of sanitization or validation performed on the strings and metadata extracted from the binaries before they are processed by the agent.
Audit Metadata