dotnet-slopwatch

Pass

Audited by Gen Agent Trust Hub on Mar 5, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the Slopwatch.Cmd package from NuGet, which is a well-known and standard package registry for the .NET ecosystem.
  • [COMMAND_EXECUTION]: Provides instructions to execute the slopwatch CLI tool to perform code analysis. This execution is central to the skill's stated purpose of providing a quality gate for code modifications.
  • [PROMPT_INJECTION]: The skill establishes an automated hook integration where the agent processes output from the analysis tool. While this creates a potential surface for indirect prompt injection via the content of analyzed source files, it is a standard characteristic of automated code review tools and is mitigated by the specific context of the tool's output.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 5, 2026, 09:30 PM