ln-822-nuget-upgrader
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches shared reference and configuration files from the author's official GitHub repository (github.com/levnikolaevich/claude-code-skills) when local files are missing. This is a standard fallback for maintaining skill consistency.
- [COMMAND_EXECUTION]: Uses official .NET CLI commands such as 'dotnet list', 'dotnet build', and 'dotnet test' to manage project dependencies and verify build integrity.
- [REMOTE_CODE_EXECUTION]: Installs the 'dotnet-outdated-tool' globally via the NuGet registry to identify outdated packages. This is a common community-supported extension for .NET development.
- [PROMPT_INJECTION]: The skill ingests untrusted project data during the upgrade process.
- Ingestion points: .csproj project files and NuGet CLI output.
- Boundary markers: Absent.
- Capability inventory: Package installation, project building, and test execution via dotnet CLI.
- Sanitization: Relies on standard CLI tool parsing.
Audit Metadata