template-comparison
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill instructs the agent to execute
dotnet newcommands, including--help,search, andinstall. This is a standard and necessary behavior for interacting with the .NET SDK to retrieve template metadata and parameters. - External Package Installation: To compare templates not present locally, the skill may perform external downloads using
dotnet new install <package>. This fetches NuGet packages from the official .NET ecosystem as part of its template discovery workflow. - Indirect Prompt Injection Surface: The skill processes text output from external commands to generate comparison tables, which represents a potential injection surface.
- Ingestion points: Output from the
dotnet new <template> --helpcommand is ingested into the agent context (SKILL.md). - Boundary markers: No specific delimiters or safety instructions are defined for parsing the command output.
- Capability inventory: The skill possesses the ability to execute shell commands and install packages via the
dotnetCLI. - Sanitization: The instructions do not specify explicit sanitization or filtering of the command output before processing.
Audit Metadata