Csharp Developer

提供专业C#/.NET项目模板生成、代码编写、架构设计和代码审查支持，涵盖多种应用类型和开发场景。

Security Scan

The skill is coherent with its C#/.NET purpose, but its implementation executes shell commands with unvalidated inputs (risk of command injection) and will write files to disk — review before using and prefer running in an isolated environment.

Purpose & Capability

Name/description match the code: provides project templates, code generation, architecture design and review. The dotnet CLI usage and included C# snippets are consistent with a .NET development helper.

Instruction Scope

Runtime code uses child_process.exec to run 'dotnet' commands. The createProject command interpolates user-controllable dotnetVersion into an unquoted shell command argument (e.g. `-f net${dotnetVersion}`), which can lead to shell injection. The skill also creates files/directories in the agent's working dir or a provided outputDir (expected for project creation, but requires caution).

Install Mechanism

No install spec (instruction-only with included code). Nothing is downloaded from external URLs; no third-party packages are installed by the skill itself.

Credentials

The skill requests no environment variables, credentials, or external config paths. The resources accessed (dotnet CLI, filesystem) are appropriate for the stated purpose.

Persistence & Privilege

always: false and no special persistence or modification of other skills. The skill writes project files into the chosen output directory (normal for a generator).

What to consider before installing

This skill appears to do what it claims (generate and review C#/.NET projects) but it runs shell commands (dotnet) and writes files. Main risk: command injection via the create-project path — dotnetVersion is interpolated into an unquoted shell argument. Before installing or invoking it: - Review or patch the code to validate/sanitize inputs (allow only numeric version strings like 6, 7, 8 or patterns matching ^\d+(\.\d+)?$). - Replace exec with a safer call (execFile/spawn with args array) or ensure all arguments are properly escaped/quoted. - Run the skill in an isolated environment or container when first testing to limit potential damage from injection or unintended filesystem writes. - Confirm you are comfortable with the skill invoking the dotnet CLI and creating files under the agent's working directory or a specified outputDir. If you cannot review or patch the code, treat the skill as untrusted and avoid running project-creation operations with untrusted inputs.

⚠️ 已整合 - 请使用 code 统一入口

本技能保留用于向后兼容，功能已整合到 code 统一入口技能

推荐使用： code csharp [类型] [任务] 或直接使用本技能（自动转发）

---

C# Developer（兼容层）

专业的 C#/.NET 开发技能，提供从项目模板、代码生成、架构设计到代码审查的完整开发工作流。

迁移指南

新用法：

code csharp WPF 振动台监控界面
code csharp 串口通信
code csharp 异步编程

旧用法（仍然可用）：

csharp WPF 振动台监控界面

支持的项目类型

• .NET Core / .NET 6+ - 跨平台控制台应用
• WPF - Windows 桌面应用（推荐用于上位机）
• WinForms - 传统 Windows 应用
• ASP.NET Core - Web API 和服务
• Class Library - 类库项目

核心功能

• ✅ 项目模板生成
• ✅ 代码生成（MVVM/异步/依赖注入）
• ✅ 架构设计
• ✅ 代码审查