Security risk report for @forgecat/openai_skills_aspnet-core v0.0.11
Source Integrity
Low
Profile is sourced from OpenAI's official skills repository (https://github.com/openai/skills) with clear attribution and Apache-2.0 license.
Content is curated technical guidance aligned with Microsoft's official ASP.NET Core documentation; no supply-chain manipulation or typosquatted dependencies detected.
Agent Intent
Low
Content is purely educational and prescriptive guidance for ASP.NET Core development; no instructions to ignore system prompts, read credentials, exfiltrate data, or install malicious payloads.
References to security practices (e.g., 'use Secret Manager in development', 'do not commit secrets to source control') are defensive best practices, not manipulation.
No hidden instructions to weaken security defaults, install backdoored dependencies, or poison future outputs; all recommendations align with official Microsoft guidance.
Details
Evidence
security-and-identity.md: 'use Secret Manager in development' and 'do not commit secrets to source control' — standard defensive guidance
program-and-pipeline.md: 'Use the most secure authentication flow available' — security-hardening instruction
No references to external URLs for code injection, no instructions to bypass validation, no guidance to disable TLS or log credentials
Permissions
Low
Profile declares no tools, MCP servers, or shell/file-write/file-delete capabilities; it is pure markdown guidance.
Authority is limited to reading and interpreting the skill's reference documents; no excessive agency or unrelated high-risk tool categories.
Details
Evidence
Declared tools section: (none declared)
MCP servers section: (none)
Content is read-only educational material with no executable hooks or tool invocations
MCP Risk
Low
No MCP servers are defined in the profile; no binary execution, network access, or filesystem scope to evaluate.
Profile is a static markdown skill with no server-side integrations or tool definitions.
Details
Evidence
MCP servers section: (none)
No tool definitions with hidden instructions or unrestricted access patterns
ForgeCat