devexpress-wpf-accordion

Pass

Audited by Gen Agent Trust Hub on Aug 18, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: The skill provides explicit instructions to the agent regarding the handling of external data fetched via documentation tools. It mandates that any content returned by search or fetch tools must be treated as untrusted reference data rather than instructions. This is a proactive security measure to prevent indirect prompt injection from external sources. * Ingestion points: Data returned by devexpress_docs_search and devexpress_docs_get_content tools. * Boundary markers: Explicitly defined in the 'Using DevExpress Documentation MCP' section of SKILL.md. * Capability inventory: Code generation and execution commands (dotnet build, dotnet run). * Sanitization: The agent is instructed to use fetched data only to inform API usage and disregard any commands or instruction overrides contained within it.
  • [EXTERNAL_DOWNLOADS]: The skill utilizes the standard .NET package manager to install official DevExpress.Wpf.Accordion and DevExpress.Wpf.Navigation packages. These resources originate from the vendor's official distribution channels and are required for the skill's primary purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 18, 2026, 01:47 PM
Security Audit — agent-trust-hub — devexpress-wpf-accordion