devexpress-reports-aspnetcore
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a comprehensive developer guide for UI component integration. All code samples follow standard ASP.NET Core patterns and utilize official vendor libraries.
- [SECURITY_PRACTICES]: The skill includes a dedicated section on security (
references/security.md), covering essential practices such as endpoint authorization using[Authorize], resolving CSRF issues with[IgnoreAntiforgeryToken]in a controlled manner, and implementing Content Security Policy (CSP) with nonces. - [DATA_EXPOSURE_AND_EXFILTRATION]: The implementation of
ReportStorageWebExtensioninreferences/report-storage.mdandexamples/quickstart-designer.csincludes necessary validation logic (IsValidUrl) to prevent path traversal attacks by checking for rooted paths and parent directory references (..). - [EXTERNAL_DOWNLOADS]: All referenced NuGet and npm packages are standard industry libraries or official vendor packages (e.g.,
@devexpress/analytics-core,bootstrap,knockout). No suspicious or unknown external dependencies were identified.
Audit Metadata