migrate-nullable-references

Pass

Audited by Gen Agent Trust Hub on Mar 10, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • Command Execution: The skill instructs the agent to execute standard .NET CLI commands such as dotnet build and dotnet test, which are required to validate the migration process and ensure code integrity.\n- Local Script Execution: The skill includes a local PowerShell script (scripts/Get-NullableReadiness.ps1) used for scanning the codebase. A manual review of the script's logic reveals it primarily performs read-only regex searches for specific syntax patterns and lacks any risky network or privilege escalation operations.\n- Indirect Prompt Injection Surface: The skill involves reading and processing external data (source code and project files). Ingestion points: .cs, .csproj, and .sln files processed by the agent and the analysis script. Boundary markers: No specific delimiters or 'ignore' instructions are used during the ingestion of source code. Capability inventory: The agent has the ability to write files (code fixes) and execute shell commands (build/test). Sanitization: No explicit sanitization of code content is performed as the agent must interpret the code to perform migration tasks. This surface is common for developer tools and is mitigated by the skill's focus on non-behavioral changes.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 10, 2026, 08:22 AM