stryker
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard CLI commands such as
dotnetfor tool management and running tests, andrg(ripgrep) for identifying project files. These operations are consistent with its stated purpose of configuring and executing mutation testing in a .NET environment. - [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
strykertool using the standard .NET tool manifest and installation process (dotnet tool install). This interaction with the NuGet registry is expected for tool-based skills. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it processes repository-specific files which could be influenced by external actors.
- Ingestion points: Reads repository configuration (
AGENTS.md) and project source files (.cs,.csproj,.sln) to determine testing scope. - Boundary markers: The skill does not define explicit delimiters or instructions to ignore embedded commands within the ingested files.
- Capability inventory: The skill has capabilities to execute shell commands (
dotnet,rg) as documented inSKILL.mdandreferences/commands.md. - Sanitization: No specific sanitization or filtering of the content read from files is performed before processing.
Audit Metadata