devexpress-blazor-ai-chat
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_SAFE]: The skill documentation includes explicit warnings against hardcoding AI provider credentials. It provides actionable guidance for using environment variables, .NET user-secrets, and Azure Key Vault for secure secret storage.
- [EXTERNAL_DOWNLOADS]: All external dependencies are standard, versioned NuGet packages from established and trusted organizations including Microsoft, Azure, and the vendor DevExpress.
- [COMMAND_EXECUTION]: Shell command examples are limited to standard .NET CLI maintenance tasks, such as package installation (
dotnet add package) and secret initialization (dotnet user-secrets init). - [SAFE]: The skill proactively addresses potential XSS vulnerabilities by including a dedicated section on sanitizing AI-generated Markdown output using
HtmlSanitizerandMarkdigbefore rendering it as HTML.
Audit Metadata