dotnet-enable-testing-platform
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOWCOMMAND_EXECUTION
Full Analysis
- Command Execution (LOW): The skill uses the Bash tool restricted to 'dotnet' commands to execute build and test operations. This is a standard and necessary part of the skill's workflow to verify the configuration changes.
- Indirect Prompt Injection (INFO): The skill processes local project files. Ingestion points: global.json and solution (*.sln) files via Read and Glob tools. Boundary markers: None (operates on structured JSON). Capability inventory: File system read/write and dotnet CLI execution. Sanitization: The skill performs JSON parsing and verification of solution files before modification. Because it handles structured configuration rather than processing untrusted natural language instructions as code, the risk of injection is negligible in the context of developer tools.
Audit Metadata