devexpress-office-file-api-presentation
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No prompt injection patterns such as behavioral overrides, safety bypasses, or system prompt extraction instructions were found.
- [DATA_EXPOSURE_AND_EXFILTRATION]: No evidence of hardcoded credentials, sensitive file path exposure, or unauthorized network operations was identified. The file access patterns (reading and writing .pptx files) are consistent with the documented purpose of the library.
- [OBFUSCATION]: No obfuscated content, encoded strings, hidden Unicode characters, or homoglyphs were detected.
- [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: The skill references official NuGet packages (e.g., DevExpress.Docs.Presentation) from the verified vendor. No remote script execution (e.g., curl | bash) or dynamic code loading from untrusted sources was found.
- [COMMAND_EXECUTION]: Contains standard .NET file I/O and printing operations necessary for PowerPoint automation. No suspicious or unauthorized command execution patterns were identified.
- [PRIVILEGE_ESCALATION]: No patterns associated with privilege escalation, such as sudo usage or modification of system permissions, were found.
- [PERSISTENCE_MECHANISMS]: No attempts to establish persistence via shell profiles, cron jobs, or registry modifications were detected.
- [INDIRECT_PROMPT_INJECTION]: While the skill involves processing external PowerPoint files, it does not exhibit unsafe data interpolation or autonomous tool use that would create a vulnerability surface for indirect prompt injection.
Audit Metadata