resharper-inspectcode
Pass
Audited by Gen Agent Trust Hub on Mar 7, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
JetBrains.ReSharper.GlobalToolspackage. This download is performed via the official .NETdotnet tool installcommand from the NuGet registry. JetBrains is a well-known and trusted vendor.- [COMMAND_EXECUTION]: The skill executesdotnetandjb(ReSharper) commands to perform environment checks, tool installation, and code analysis. These commands are necessary for the skill's primary function and do not involve suspicious parameters.- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection (Category 8) as it parses and summarizes issues from an XML report. Ingestion points: The XML report file./artifacts/inspectcode-report.xmlis read and parsed. Boundary markers: No specific delimiters are used when the agent summarizes findings. Capability inventory: The skill can execute shell commands (dotnet,jb) and perform filesystem operations. Sanitization: The skill extracts structured data from XML attributes. This is a standard characteristic of code analysis tools and is considered safe given the intended use case.
Audit Metadata