Tighten known-domains allowlist

.github/CODEOWNERS

@@ -24,17 +24,17 @@
 
 /plugins/dotnet/agents/optimizing-dotnet-performance.agent.md @dotnet/appmodel
 
-/plugins/dotnet-ai/skills/mcp-csharp-create/ @leslierichardson95 @artl93
-/tests/dotnet-ai/mcp-csharp-create/ @leslierichardson95 @artl93
+/plugins/dotnet-ai/skills/mcp-csharp-create/ @leslierichardson95 @mikekistler
+/tests/dotnet-ai/mcp-csharp-create/ @leslierichardson95 @mikekistler
 
-/plugins/dotnet-ai/skills/mcp-csharp-debug/ @leslierichardson95 @artl93
-/tests/dotnet-ai/mcp-csharp-debug/ @leslierichardson95 @artl93
+/plugins/dotnet-ai/skills/mcp-csharp-debug/ @leslierichardson95 @mikekistler
+/tests/dotnet-ai/mcp-csharp-debug/ @leslierichardson95 @mikekistler
 
-/plugins/dotnet-ai/skills/mcp-csharp-publish/ @leslierichardson95 @artl93
-/tests/dotnet-ai/mcp-csharp-publish/ @leslierichardson95 @artl93
+/plugins/dotnet-ai/skills/mcp-csharp-publish/ @leslierichardson95 @mikekistler
+/tests/dotnet-ai/mcp-csharp-publish/ @leslierichardson95 @mikekistler
 
-/plugins/dotnet-ai/skills/mcp-csharp-test/ @leslierichardson95 @artl93
-/tests/dotnet-ai/mcp-csharp-test/ @leslierichardson95 @artl93
+/plugins/dotnet-ai/skills/mcp-csharp-test/ @leslierichardson95 @mikekistler
+/tests/dotnet-ai/mcp-csharp-test/ @leslierichardson95 @mikekistler
 
 # dotnet-upgrade (migrating and upgrading .NET projects)
 /plugins/dotnet-upgrade/skills/thread-abort-migration/ @dotnet/appmodel

eng/known-domains.txt

@@ -16,11 +16,12 @@ microsoft.com
 modelcontextprotocol.io
 
 # Tools
-aka.ms
+aka.ms/dotnet-trace
+aka.ms/perfcollect
+api.nuget.org
 download.sysinternals.com
 msdl.microsoft.com
-nuget.org
-nugettest.org
+nuget.org/account/trustedpublishing
 dotnetcli.blob.core.windows.net
 
 # Platforms
@@ -57,12 +58,8 @@ github.com/yourusername
 github.com/username
 
 # Community
-fluentassertions.com
-npmjs.com/package/@modelcontextprotocol
 ollama.com
 stackoverflow.com
+## Cannot pin npmjs package by hash, only version
+npmjs.com/package/@modelcontextprotocol/inspector/v/0.21.1
 xunit.net
-
-# UI helpers
-speedscope.app
-

plugins/dotnet-ai/skills/mcp-csharp-debug/SKILL.md

@@ -209,5 +209,5 @@ builder.Logging.AddConsole(options =>
 
 ## More Info
 
-- [MCP Inspector](https://www.npmjs.com/package/@modelcontextprotocol/inspector) — Interactive debugging tool for MCP servers
+- [MCP Inspector](https://www.npmjs.com/package/@modelcontextprotocol/inspector/v/0.21.1) — Interactive debugging tool for MCP servers
 - [VS Code MCP documentation](https://code.visualstudio.com/docs/copilot/chat/mcp-servers) — Configuring MCP servers in VS Code

plugins/dotnet-ai/skills/mcp-csharp-publish/references/nuget-packaging.md

@@ -68,11 +68,6 @@ dotnet tool uninstall --global YourUsername.MyMcpServer
 dotnet nuget push bin/Release/*.nupkg \
   --api-key YOUR_NUGET_API_KEY \
   --source https://api.nuget.org/v3/index.json
-
-# Or push to NuGet test environment first
-dotnet nuget push bin/Release/*.nupkg \
-  --api-key YOUR_NUGET_API_KEY \
-  --source https://apiint.nugettest.org/v3/index.json
 ```
 
 ## User Configuration

plugins/dotnet-ai/skills/mcp-csharp-test/SKILL.md

@@ -188,4 +188,3 @@ For the evaluation format, example questions, and detailed guidance, see [refere
 ## More Info
 
 - [xUnit documentation](https://xunit.net/docs/getting-started/netcore/cmdline) — Getting started with xUnit for .NET
-- [FluentAssertions](https://fluentassertions.com/) — Readable assertion library for .NET

plugins/dotnet-diag/skills/dotnet-trace-collect/references/dotnet-trace-collect.md

@@ -64,7 +64,7 @@ dotnet-trace collect -p <PID> --format speedscope
 | Format | Extension | Analysis Tool |
 |--------|-----------|---------------|
 | `nettrace` (default) | `.nettrace` | PerfView, Visual Studio, `dotnet-trace report` |
-| `speedscope` | `.speedscope.json` | [Speedscope](https://www.speedscope.app/) (web) |
+| `speedscope` | `.speedscope.json` | Speedscope |
 | `chromium` | `.chromium.json` | Chrome DevTools (chrome://tracing) |
 
 ## Container Usage