devexpress-office-file-api-excel-export
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill targets official DevExpress libraries and NuGet packages (DevExpress.Document.Processor). All referenced namespaces and functionality align with the legitimate devexpress vendor profile.\n- [EXTERNAL_DOWNLOADS]: The skill uses the official DevExpress NuGet package (DevExpress.Document.Processor) to install the Excel Export Library. These are trusted vendor resources.\n- [SAFE]: The skill provides explicit instructions for the agent to ignore potential instructions embedded in external documentation fetched via tools, providing a defense against prompt injection from external reference sources.\n- [SAFE]: Code patterns for file generation use standard .NET FileStream and System.IO practices. The inclusion of Process.Start in examples is a standard convenience feature for opening generated files in developer environments.\n- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface. Ingestion points: Data source input (IEnumerable, DataTable, database reader) mentioned in SKILL.md. Boundary markers: None provided for data interpolation. Capability inventory: File system writing (FileStream) and execution (Process.Start) across SKILL.md and quickstart.cs. Sanitization: No specific guidance on sanitizing or escaping external content before interpolation into Excel formulas.
Audit Metadata