connection-properties
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- Indirect Prompt Injection Surface: The agent is designed to process C# resource files and README documentation to ensure proper implementation and documentation of connection properties. This creates a surface where instructions embedded in project files could potentially influence agent behavior.
- Ingestion points: The agent reads Aspire resource class files (SKILL.md) and associated project README.md files.
- Boundary markers: The instructions do not define specific delimiters or "ignore" directives to distinguish between resource metadata and potential adversarial instructions contained within the analyzed files.
- Capability inventory: The skill grants the agent the ability to read source code structures and perform file-writing operations to update project documentation.
- Sanitization: No explicit sanitization or validation logic is specified for content extracted from the source files before it is formatted into the README tables.
Audit Metadata