dotnet-build-analysis
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the Azure Artifacts Credential Provider using shell scripts hosted on Microsoft's official
aka.msdomain. - [COMMAND_EXECUTION]: Provides various CLI patterns for diagnosing NuGet sources and environmental issues, including the use of
dotnet nuget,ls, and executing downloaded shell/PowerShell scripts. - [PROMPT_INJECTION]: The skill is designed to interpret MSBuild output, which creates a surface for indirect prompt injection if the build logs contain malicious instructions intended to influence the agent's next steps.
- Ingestion points: MSBuild error messages, warning strings, and NuGet restore logs processed by the agent.
- Boundary markers: None specified in the documentation.
- Capability inventory: Suggested execution of
dotnetCLI tools and installation of credential providers viacurl | bashoriexpatterns. - Sanitization: No explicit sanitization or validation of the input logs is described.
Audit Metadata