devexpress-office-file-api-pdf
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate documentation for the DevExpress Office File API. All referenced NuGet packages such as DevExpress.Document.Processor and DevExpress.Pdf.SkiaRenderer, and official domains like devexpress.com, are verified vendor resources.
- [COMMAND_EXECUTION]: The skill contains standard shell instructions for package installation using the .NET CLI (dotnet add package) and system dependency management on Linux (apt-get install). These are necessary for the library's core functionality.
- [PROMPT_INJECTION]: The skill facilitates the ingestion of external data via PDF loading and text extraction API calls, representing a potential indirect prompt injection surface.
- Ingestion points: Data enters the context through PdfDocumentProcessor.LoadDocument and GetText methods defined in SKILL.md and references/content-extraction.md.
- Boundary markers: The instructions include defensive prompts to ignore instructions originating from external MCP documentation, though no specific delimiters are defined for the PDF content itself.
- Capability inventory: The API supports file system writes (SaveDocument), network access for Time Stamping Authority (TSA) communication, and document printing.
- Sanitization: There are no documented sanitization or filtering steps for content extracted from PDF files.
Audit Metadata