containerize-aspnet-framework
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted configuration settings via the 'Containerization Settings' section in
SKILL.md, including user-defined fields like 'Environment variables', 'Registry keys', and 'Other instructions'. There are no explicit boundary markers or isolation mechanisms to prevent malicious payloads embedded in these configuration values from manipulating the agent's behavior during file modification or command execution phases. The skill has capabilities to modify the local filesystem (writingweb.config,Dockerfile,LogMonitorConfig.json) and run shell commands (docker build), creating an exploitation surface if input data contains prompt injection commands. - [EXTERNAL_DOWNLOADS]: The Dockerfile template includes a command (
curl -fSLo LogMonitor.exe https://github.com/microsoft/windows-container-tools/releases/download/v2.1.1/LogMonitor.exe) that downloads an executable log monitoring utility from Microsoft's public GitHub repository during the container image creation process.
Audit Metadata