dotnet-slopwatch
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
Slopwatch.Cmdpackage from NuGet, which is a well-known and standard package registry for the .NET ecosystem. - [COMMAND_EXECUTION]: Provides instructions to execute the
slopwatchCLI tool to perform code analysis. This execution is central to the skill's stated purpose of providing a quality gate for code modifications. - [PROMPT_INJECTION]: The skill establishes an automated hook integration where the agent processes output from the analysis tool. While this creates a potential surface for indirect prompt injection via the content of analyzed source files, it is a standard characteristic of automated code review tools and is mitigated by the specific context of the tool's output.
Audit Metadata