template-comparison

Pass

Audited by Gen Agent Trust Hub on Sep 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • Command Execution: The skill instructs the agent to execute dotnet new commands, including --help, search, and install. This is a standard and necessary behavior for interacting with the .NET SDK to retrieve template metadata and parameters.
  • External Package Installation: To compare templates not present locally, the skill may perform external downloads using dotnet new install <package>. This fetches NuGet packages from the official .NET ecosystem as part of its template discovery workflow.
  • Indirect Prompt Injection Surface: The skill processes text output from external commands to generate comparison tables, which represents a potential injection surface.
  • Ingestion points: Output from the dotnet new <template> --help command is ingested into the agent context (SKILL.md).
  • Boundary markers: No specific delimiters or safety instructions are defined for parsing the command output.
  • Capability inventory: The skill possesses the ability to execute shell commands and install packages via the dotnet CLI.
  • Sanitization: The instructions do not specify explicit sanitization or filtering of the command output before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 1, 2026, 04:51 PM
Security Audit — agent-trust-hub — template-comparison