resharper-inspectcode

Pass

Audited by Gen Agent Trust Hub on Mar 7, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the JetBrains.ReSharper.GlobalTools package. This download is performed via the official .NET dotnet tool install command from the NuGet registry. JetBrains is a well-known and trusted vendor.- [COMMAND_EXECUTION]: The skill executes dotnet and jb (ReSharper) commands to perform environment checks, tool installation, and code analysis. These commands are necessary for the skill's primary function and do not involve suspicious parameters.- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection (Category 8) as it parses and summarizes issues from an XML report. Ingestion points: The XML report file ./artifacts/inspectcode-report.xml is read and parsed. Boundary markers: No specific delimiters are used when the agent summarizes findings. Capability inventory: The skill can execute shell commands (dotnet, jb) and perform filesystem operations. Sanitization: The skill extracts structured data from XML attributes. This is a standard characteristic of code analysis tools and is considered safe given the intended use case.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 7, 2026, 06:31 AM