static-analysis

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS] (SAFE): The skill references standard .NET analyzer packages such as StyleCop.Analyzers, Roslynator.Analyzers, and SonarAnalyzer.CSharp via the dotnet add package command. These are trusted packages from the official NuGet registry.
  • [COMMAND_EXECUTION] (SAFE): Uses standard dotnet CLI commands (build, format, add package) for project management and analysis. A provided CI integration script uses standard bash patterns to check code quality and return appropriate exit codes.
  • [DATA_EXFILTRATION] (SAFE): No sensitive file access or network exfiltration patterns were detected. The documentation explicitly encourages the use of security analyzers (e.g., CA3001, S2068) to prevent SQL injection and hardcoded credentials in target projects.
  • [PROMPT_INJECTION] (SAFE): The instructions are strictly focused on .NET configuration and do not contain any patterns aimed at overriding agent behavior or bypassing safety protocols.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:32 PM