devexpress-winforms-tree-list
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install NuGet packages such as
DevExpress.Win.TreeListandDevExpress.Win.Printing. These references are to official DevExpress packages and are standard for a development-focused skill. - [INDIRECT_PROMPT_INJECTION]: The skill describes how to bind the TreeList control to external data sources (e.g.,
DataSource,AppendNode) and how to export that data to various file formats (XLSX, PDF, XML). - Ingestion points: Data sources bound via
treeList.DataSourceor items added viaAppendNode(multiple files). - Boundary markers: None explicitly defined for the data contents.
- Capability inventory: File system write operations via
ExportToXml,ExportToXlsx,ExportToPdf, etc. (referenced inreferences/printing-and-export.md). - Sanitization: Not applicable as the skill provides a UI control API for developer use; however, developers should validate data before binding to prevent UI-level injections if displaying untrusted content.
- [DYNAMIC_EXECUTION]: The skill mentions
ImportFromXmlinreferences/printing-and-export.mdfor reloading node data, which involves XML deserialization. This is a standard feature for layout and data persistence in UI controls. The skill also generates C# code snippets for WinForms development, which is its primary purpose.
Audit Metadata