migrate-dotnet9-to-dotnet10
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFE
Full Analysis
- Standard Tooling Usage: The skill workflow incorporates common development CLI commands for building, restoring, and testing projects. These tools are used within their intended context to manage dependencies and verify the integrity of the project during the upgrade process.
- Trusted Resource References: External references, including container base images and code repositories, point to official and well-known service locations. These sources are standard for the relevant technology ecosystem and are treated as safe.
- Indirect Prompt Injection Surface: The skill analyzes project-specific files such as build configurations and container definitions (Ingestion points: .csproj, .sln, Dockerfile). It uses this data to perform necessary updates and verification steps (Capability inventory: file writing, command execution). To mitigate potential risks from untrusted project content, the instructions explicitly direct the agent to prioritize the provided reference documents as the authoritative source for migration logic (Boundary markers) and provide structured patterns for all code transformations (Sanitization). This surface is a necessary component of the migration task and is managed through grounding instructions.
- Security-Focused Migration Guidance: The reference materials specifically address security-critical considerations, such as updates to TLS cipher suite validation and the handling of sensitive data in serialization processes. This ensures that security best practices are highlighted during the migration lifecycle.
Audit Metadata