dotnet-api
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely composed of documentation and boilerplate code examples intended to guide developers in building secure and efficient .NET applications. All code snippets align with industry-standard patterns for ASP.NET Core development.
- [PROMPT_INJECTION]: No malicious instructions designed to subvert AI safety guidelines or extract system prompts were found. Content related to AI orchestration (Semantic Kernel) is strictly instructional and follows best practices for separating instructions from data.
- [EXTERNAL_DOWNLOADS]: Remote resources and package references (e.g., NuGet, NPM) point to trusted, official, or well-known development tools such as DocFX, Scalar, and various Microsoft-supported libraries. These references are part of standard development workflows.
- [COMMAND_EXECUTION]: The skill mentions command-line tools like 'dotnet ef' and 'docfx', which are legitimate and widely used in the .NET ecosystem for migrations and documentation generation.
- [SAFE]: Guidance provided in 'references/secrets-management.md' and 'references/security-owasp.md' specifically educates users on avoiding hardcoded credentials and using secure storage mechanisms like .NET User Secrets, environment variables, and Managed Identity.
Audit Metadata