dotnet-add-analyzers

Fail

Audited by Socket on Mar 7, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill’s footprint is coherent with its stated purpose: it focuses on configuring and applying .NET analyzers within a project using standard MSBuild/CPM mechanisms and locally stored configuration. There is no evident data exfiltration or dangerous behavior. The only noteworthy consideration is the use of third-party analyzers via CPM/Directory.Build.targets, which introduces external dependencies; ensure versions are pinned, sources are trusted, and license/compliance checks are performed. Overall, the risk is low to moderate and proportionate to its described goal of improving code quality with analyzers.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 7, 2026, 03:44 PM
Package URL
pkg:socket/skills-sh/wshaddix%2Fdotnet-skills%2Fdotnet-add-analyzers%2F@bc4e0ee0587ce6dac9397a436e9e8653a9d2d2db