devexpress-dashboard-export
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external dashboard state data, which represents a potential attack surface for indirect prompt injection.\n
- Ingestion points: The
dashboardStateJsonparameter in theExportToPdfandExportItemToExcelmethods (references/aspnetcore-export.md) accepts data from the client.\n - Boundary markers: No explicit delimiters or safety instructions are provided to the agent regarding the interpretation of the processed JSON data.\n
- Capability inventory: The skill facilitates file-stream generation and network operations via SMTP (MailKit).\n
- Sanitization: The skill relies on library-level JSON parsing without additional sanitization of the input state.\n- [EXTERNAL_DOWNLOADS]: The skill references several official DevExpress NuGet packages and the well-known MailKit library for its core features.
Audit Metadata