dotnet-trace-collect
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Command Execution: The skill provides detailed instructions for running diagnostic tools like
dotnet-trace,PerfView, andperfcollect. These tools often require administrative or root privileges to collect kernel-level telemetry and runtime events, which is a common requirement for deep system analysis. - External Resource Acquisition: The reference documentation includes commands to download diagnostic binaries from official Microsoft domains such as
aka.ms,mcr.microsoft.com, and GitHub. These are recognized distribution points for the .NET ecosystem and are documented here as part of the tool setup process. - Indirect Prompt Injection Surface: The skill ingests user-provided environmental data and symptoms to recommend specific diagnostic commands. 1. Ingestion points: Inputs such as 'Symptom' and 'Repro characteristics' in
SKILL.md. 2. Boundary markers: None explicitly defined for user inputs. 3. Capability inventory: Execution of shell commands and utility installation across all reference files (e.g.,references/perfcollect.md). 4. Sanitization: Not explicitly defined, however, the workflow includes verification steps such as PID discovery to ensure commands target the intended processes.
Audit Metadata