devexpress-reports-aspnetcore
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill relies exclusively on official packages from NuGet and npm.\n
- Evidence: References to
DevExpress.AspNetCore.Reporting(NuGet) anddevexpress-reporting(npm) are standard for the developer's products and sourced from official registries.\n- [DATA_EXFILTRATION]: Implementation examples for report storage include necessary security checks to prevent directory traversal.\n - Evidence: The
ReportStorageWebExtensionexample inexamples/quickstart-designer.csandreferences/report-storage.mdincludes!url.Contains("..\")validation to prevent unauthorized file access.\n- [PROMPT_INJECTION]: No malicious instructions, safety bypass attempts, or hidden system prompt extractions were found within the skill content.\n - Evidence: The instructions are strictly limited to technical configuration, UI integration, and developer troubleshooting.\n- [COMMAND_EXECUTION]: The skill uses standard development commands for project setup and deployment.\n
- Evidence: Commands such as
dotnet build,dotnet run, andnpm installare utilized correctly within the context of ASP.NET Core development.\n- [INDIRECT_PROMPT_INJECTION]: Although the skill handles untrusted report names, the provided implementation guidelines mandate input validation to mitigate injection risks.\n - Evidence: Reference implementations for
IReportProviderandReportStorageWebExtensioninclude explicit sanitization of URL parameters and report names.
Audit Metadata