migrate-vstest-to-mtp
github.com/dotnet/skills
Scanned Thu, 28 May 2026 17:54:12 GMT
Scan ID crawl-wb12a175bpgat605ha3gti0y · 5ms
B
SCORE 75 / 100
Verdict: Safe to install

5 medium findings.

This skill ships without a capability manifest plus 4 other issues listed below.

0 critical0 high5 medium7 rules passed

Why grade B?

score · 75 / 100

The current grade reflects 5 medium findings (3+ MEDs → B).

0 CRIT0 HIGH5 MED0 LOW
To reach a higher grade
  • A
    Reach Atarget score 95

    Resolve 3 of 5 MED (cap is 2).

Thresholds are documented at /docs/grading. Source-of-truth is the grade() function in @skillox/scanner.

Findings · ordered by severity

med
No capability manifest declared
The skill ships without a `manifest.yaml` or `capabilities` block in its frontmatter. Without a manifest, the runtime cannot enforce what this skill is permitted to do.
rule: no-manifest
med
Link text shows "microsoft.testing.platform" but points at learn.microsoft.com
The visible link text contains the domain `microsoft.testing.platform`, but the URL actually targets `learn.microsoft.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 388CWE-601
386
387- [Test platforms overview](https://learn.microsoft.com/dotnet/core/testing/test-platforms-overview)
388- [Migrate from VSTest to Microsoft.Testing.Platform](https://learn.microsoft.com/dotnet/core/testing/migrating-vstest-microsoft-testing-platform)text→microsoft.testing.platform · href→learn.microsoft.com
389- [Microsoft.Testing.Platform overview](https://learn.microsoft.com/dotnet/core/testing/microsoft-testing-platform-intro)
390- [Testing with dotnet test](https://learn.microsoft.com/dotnet/core/testing/unit-testing-with-dotnet-test)
med
Link text shows "microsoft.testing.platform" but points at learn.microsoft.com
The visible link text contains the domain `microsoft.testing.platform`, but the URL actually targets `learn.microsoft.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 389CWE-601
387- [Test platforms overview](https://learn.microsoft.com/dotnet/core/testing/test-platforms-overview)
388- [Migrate from VSTest to Microsoft.Testing.Platform](https://learn.microsoft.com/dotnet/core/testing/migrating-vstest-microsoft-testing-platform)
389- [Microsoft.Testing.Platform overview](https://learn.microsoft.com/dotnet/core/testing/microsoft-testing-platform-intro)text→microsoft.testing.platform · href→learn.microsoft.com
390- [Testing with dotnet test](https://learn.microsoft.com/dotnet/core/testing/unit-testing-with-dotnet-test)
391- [Microsoft.Testing.Platform CLI options](https://learn.microsoft.com/dotnet/core/testing/microsoft-testing-platform-cli-options)
med
Link text shows "microsoft.testing.platform" but points at learn.microsoft.com
The visible link text contains the domain `microsoft.testing.platform`, but the URL actually targets `learn.microsoft.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 391CWE-601
389- [Microsoft.Testing.Platform overview](https://learn.microsoft.com/dotnet/core/testing/microsoft-testing-platform-intro)
390- [Testing with dotnet test](https://learn.microsoft.com/dotnet/core/testing/unit-testing-with-dotnet-test)
391- [Microsoft.Testing.Platform CLI options](https://learn.microsoft.com/dotnet/core/testing/microsoft-testing-platform-cli-options)text→microsoft.testing.platform · href→learn.microsoft.com
392- [Microsoft.Testing.Platform extensions](https://learn.microsoft.com/dotnet/core/testing/unit-testing-platform-extensions)
393
med
Link text shows "microsoft.testing.platform" but points at learn.microsoft.com
The visible link text contains the domain `microsoft.testing.platform`, but the URL actually targets `learn.microsoft.com`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
rule: anchor-href-mismatchline: 392CWE-601
390- [Testing with dotnet test](https://learn.microsoft.com/dotnet/core/testing/unit-testing-with-dotnet-test)
391- [Microsoft.Testing.Platform CLI options](https://learn.microsoft.com/dotnet/core/testing/microsoft-testing-platform-cli-options)
392- [Microsoft.Testing.Platform extensions](https://learn.microsoft.com/dotnet/core/testing/unit-testing-platform-extensions)text→microsoft.testing.platform · href→learn.microsoft.com
393
Scan another →Share
skillox.io/r/crawl-wb12a175bpgat605ha3gti0y