dotnet-quality-ci
Pass
Audited by Gen Agent Trust Hub on Apr 11, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data by reading project configuration files, such as
.csproj,Directory.Build.props, and.editorconfig, to determine the current quality state. While it lacks explicit sanitization markers, this data ingestion is necessary for the skill's primary purpose of repository setup and refinement.\n- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install several well-known third-party .NET tools and analyzers from official registries, including ReportGenerator, Stryker.NET, Roslynator, and StyleCop.Analyzers. These references target established, reputable open-source projects and are documented neutrally for the purpose of improving code quality.\n- [COMMAND_EXECUTION]: The workflow requires the execution of standard .NET CLI commands for building, formatting, and testing code (e.g.,dotnet build,dotnet test,dotnet format). These commands are essential for verifying the quality gates and are restricted to standard development operations.
Audit Metadata