stryker

Pass

Audited by Gen Agent Trust Hub on Apr 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard CLI commands such as dotnet for tool management and running tests, and rg (ripgrep) for identifying project files. These operations are consistent with its stated purpose of configuring and executing mutation testing in a .NET environment.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the stryker tool using the standard .NET tool manifest and installation process (dotnet tool install). This interaction with the NuGet registry is expected for tool-based skills.
  • [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it processes repository-specific files which could be influenced by external actors.
  • Ingestion points: Reads repository configuration (AGENTS.md) and project source files (.cs, .csproj, .sln) to determine testing scope.
  • Boundary markers: The skill does not define explicit delimiters or instructions to ignore embedded commands within the ingested files.
  • Capability inventory: The skill has capabilities to execute shell commands (dotnet, rg) as documented in SKILL.md and references/commands.md.
  • Sanitization: No specific sanitization or filtering of the content read from files is performed before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 22, 2026, 02:19 AM