migrate-vstest-to-mtp

github.com/dotnet/skills
Verdict: Generally safe
0 critical0 high5 medium
B
SCORE 75 / 100
$skillox install migrate-vstest-to-mtpSoon
Sign in to followFollowing emails you when a re-scan drops the grade. Opt-out is per-creator on /account/billing.

Why grade B?

score · 75 / 100

The current grade reflects 5 medium findings (3+ MEDs → B).

0 CRIT0 HIGH5 MED0 LOW
To reach a higher grade
  • A
    Reach Atarget score 95

    Resolve 3 of 5 MED (cap is 2).

Thresholds are documented at /docs/grading. Source-of-truth is the grade() function in @skillox/scanner.

Latest scan findings

Scan crawl-wb12a175bpgat605ha3gti0y · Thu, 28 May 2026 17:54:12 GMT · 5ms

med
No capability manifest declared
The skill ships without a `manifest.yaml` or `capabilities` block in its frontmatter. Without a manifest, the runtime cannot enforce what this skill is permitted to do.
rule: no-manifest
med
Link text shows "microsoft.testing.platform" but points at learn.microsoft.com
The visible link text contains the domain `microsoft.testing.platform`, but the URL actually targets `learn.microsoft.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 388CWE-601
386
387- [Test platforms overview](https://learn.microsoft.com/dotnet/core/testing/test-platforms-overview)
388- [Migrate from VSTest to Microsoft.Testing.Platform](https://learn.microsoft.com/dotnet/core/testing/migrating-vstest-microsoft-testing-platform)text→microsoft.testing.platform · href→learn.microsoft.com
389- [Microsoft.Testing.Platform overview](https://learn.microsoft.com/dotnet/core/testing/microsoft-testing-platform-intro)
390- [Testing with dotnet test](https://learn.microsoft.com/dotnet/core/testing/unit-testing-with-dotnet-test)
med
Link text shows "microsoft.testing.platform" but points at learn.microsoft.com
The visible link text contains the domain `microsoft.testing.platform`, but the URL actually targets `learn.microsoft.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 389CWE-601
387- [Test platforms overview](https://learn.microsoft.com/dotnet/core/testing/test-platforms-overview)
388- [Migrate from VSTest to Microsoft.Testing.Platform](https://learn.microsoft.com/dotnet/core/testing/migrating-vstest-microsoft-testing-platform)
389- [Microsoft.Testing.Platform overview](https://learn.microsoft.com/dotnet/core/testing/microsoft-testing-platform-intro)text→microsoft.testing.platform · href→learn.microsoft.com
390- [Testing with dotnet test](https://learn.microsoft.com/dotnet/core/testing/unit-testing-with-dotnet-test)
391- [Microsoft.Testing.Platform CLI options](https://learn.microsoft.com/dotnet/core/testing/microsoft-testing-platform-cli-options)
med
Link text shows "microsoft.testing.platform" but points at learn.microsoft.com
The visible link text contains the domain `microsoft.testing.platform`, but the URL actually targets `learn.microsoft.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 391CWE-601
389- [Microsoft.Testing.Platform overview](https://learn.microsoft.com/dotnet/core/testing/microsoft-testing-platform-intro)
390- [Testing with dotnet test](https://learn.microsoft.com/dotnet/core/testing/unit-testing-with-dotnet-test)
391- [Microsoft.Testing.Platform CLI options](https://learn.microsoft.com/dotnet/core/testing/microsoft-testing-platform-cli-options)text→microsoft.testing.platform · href→learn.microsoft.com
392- [Microsoft.Testing.Platform extensions](https://learn.microsoft.com/dotnet/core/testing/unit-testing-platform-extensions)
393
med
Link text shows "microsoft.testing.platform" but points at learn.microsoft.com
The visible link text contains the domain `microsoft.testing.platform`, but the URL actually targets `learn.microsoft.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 392CWE-601
390- [Testing with dotnet test](https://learn.microsoft.com/dotnet/core/testing/unit-testing-with-dotnet-test)
391- [Microsoft.Testing.Platform CLI options](https://learn.microsoft.com/dotnet/core/testing/microsoft-testing-platform-cli-options)
392- [Microsoft.Testing.Platform extensions](https://learn.microsoft.com/dotnet/core/testing/unit-testing-platform-extensions)text→microsoft.testing.platform · href→learn.microsoft.com
393
View latest scan →
skillox.io/c/migrate-vstest-to-mtp