analyzing-dotnet-performance
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [Command Execution for Code Analysis]: The skill utilizes the
greputility to scan provided source files for specific performance-related patterns, such asasync voidor inefficient string concatenations. These are read-only operations used for identifying optimization opportunities. - Evidence: Pattern detection recipes are included in
SKILL.mdand reference files likereferences/async-patterns.mdandreferences/collections-and-linq.md. - [Processing of External Source Code]: The skill is designed to ingest and analyze user-provided codebases. This creates a surface for indirect prompt injection if the analyzed files contain instructions designed to influence the agent's output. This is a common characteristic of static analysis tools.
- Ingestion points: The skill defines "Source code" as a primary input in
SKILL.md. - Boundary markers: No explicit markers are defined to separate code from instructions.
- Capability inventory: The skill uses
grepfor file scanning. - Sanitization: No explicit sanitization or filtering of the input source code is described.
Audit Metadata