dotnet-scaffold-project
Pass
Audited by Gen Agent Trust Hub on Mar 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices for .NET development.\n- It enables NuGetAudit to detect vulnerable packages during the build process.\n- It configures nuget.config with clear and packageSourceMapping to mitigate dependency confusion attacks by ensuring packages only come from the official NuGet registry.\n- It uses Central Package Management (CPM) to maintain consistent and verifiable dependency versions across the solution.\n- All external dependencies (e.g., Microsoft.SourceLink.GitHub, xUnit) are from well-known, trusted organizations.\n- No suspicious network operations, obfuscation, or unauthorized file access patterns were detected.
Audit Metadata