dotnet-pinvoke

Pass

Audited by Gen Agent Trust Hub on Apr 11, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Recommends the use of official Microsoft tools and packages including Microsoft.Windows.CsWin32 and CsWinRT for automated code generation. These are hosted on trusted official repositories.
  • [SAFE]: The skill implements strong security guardrails by requiring explicit string encoding (avoiding CharSet.Auto) and advocating for the use of SafeHandle to prevent memory leaks and double-free vulnerabilities in native code interop.
  • [PROMPT_INJECTION]: The skill defines a workflow for processing user-provided native headers to generate C# declarations, which constitutes a surface for indirect prompt injection. 1. Ingestion points: Native C/C++ header files and documentation provided by the user. 2. Boundary markers: None explicitly mentioned in the instructions for separating untrusted header data. 3. Capability inventory: Generates C# interop code (static partial methods); does not perform shell execution, file system modification, or network requests. 4. Sanitization: No specific sanitization or validation of native header content is described.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 11, 2026, 12:42 PM