dotnet-xunit
Pass
Audited by Gen Agent Trust Hub on Apr 11, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted data from the repository environment which could influence agent behavior through indirect prompt injection.
- Ingestion points: The skill reads configuration and command overrides from
AGENTS.mdand evaluates project structure from.csprojfiles as part of its workflow. - Boundary markers: There are no explicit delimiters or instructions to the agent to distinguish between its own system instructions and potentially malicious instructions embedded in the project files it reads.
- Capability inventory: The skill leverages powerful CLI capabilities including
dotnet test,dotnet run, anddotnet add packageto modify the project environment or execute code. - Sanitization: No explicit sanitization or validation of the commands retrieved from
AGENTS.mdis specified before they are passed to the shell for execution. - [COMMAND_EXECUTION]: Interacts with the local system via shell commands to facilitate test execution and project management as part of its primary functionality.
- Evidence: Employs
dotnet test,dotnet run, andrg(ripgrep) for discovering and executing tests within the local environment. - [EXTERNAL_DOWNLOADS]: Fetches and installs external dependencies from public package registries to configure the testing environment.
- Evidence: Utilizes
dotnet add packageto install officialxunit.v3and related testing packages from the NuGet registry.
Audit Metadata