v2.0.0 - World-Class .NET Offensive Security Skill Suite

Release v2.0.0

Infrastructure

• Added AGENTS.md, CONTRIBUTING.md, CHANGELOG.md
• Professional .gitignore for Python / .NET / Skill projects
• GitHub Actions CI validation workflow (skill structure, Python syntax, frontmatter)
• dnSpy binaries removed from repo; replaced with tools/setup-dnspy.ps1

New Skills (3)

• dotnet-minimal-api-audit - ASP.NET Core Minimal API, EndpointFilter, Source Generator, OpenAPI exposure
• dotnet-blazor-audit - Blazor Server / WASM, JS Interop, MarkupString, Circuit, XSS
• dotnet-signalr-audit - SignalR Hub, HubContext, Group management, WebSocket security

Enhancements

• All 18 skills upgraded with version, author, tags, compatibility, description_en in frontmatter
• All agents/openai.yaml upgraded with model.hints, tools.recommended, file_associations
• Bilingual README: README.md (CN) + README_EN.md (EN) with detailed operational guides
• collect_dotnet_surface.py expanded with Minimal API, Blazor, SignalR detection rules
• DOTNET_ATTACK_SURFACE_TAXONOMY.md synchronized with new categories

Quality & Standards

• Safe-by-default verification for all high-risk findings
• Secret redaction enforced (machineKey, tokens, connection strings)
• Weaponized payloads limited to Authorized Lab Validation sections only
• Output standards: unique quality_report.md, no TODO, no omitted outputs