dotnet-ado-patterns
Provides composable Azure DevOps YAML pipeline patterns for .NET projects, enhancing CI/CD processes with templates and triggers.
Install this skill
or
25/100
Security score
The dotnet-ado-patterns skill was audited on Mar 2, 2026 and we found 5 security issues across 1 threat category, including 5 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
high line 11
Template literal with variable interpolation in command context
SourceSKILL.md
| 11 | configuration, pipeline decorators for organization-wide policy injection, conditional insertion with `${{ if }}` and |
high line 12
Template literal with variable interpolation in command context
SourceSKILL.md
| 12 | `${{ each }}` expressions, multi-stage pipelines (build, test, deploy), and pipeline triggers for CI, PR, and scheduled |
high line 15
Template literal with variable interpolation in command context
SourceSKILL.md
| 15 | **Version assumptions:** Azure Pipelines YAML schema. `DotNetCoreCLI@2` task for .NET 8/9/10 builds. Template |
high line 77
Template literal with variable interpolation in command context
SourceSKILL.md
| 77 | 3. **Variable group secrets are not available in template expressions** -- `${{ variables.mySecret }}` resolves at |
high line 79
Template literal with variable interpolation in command context
SourceSKILL.md
| 79 | 4. **`${{ each }}` iterates at compile time** -- the loop generates YAML before the pipeline runs; runtime variables |
Scanned on Mar 2, 2026
View Security Dashboard