devexpress-wpf-mvvm
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The static detector flagged potential bypass instructions; however, analysis confirms these are defensive safety constraints. The instructions specifically direct the agent to treat external documentation as untrusted reference data and to never follow instructions embedded in that external content.
- [EXTERNAL_DOWNLOADS]: The skill references official DevExpress NuGet packages and GitHub repositories for development components. These resources are consistent with the skill author's identity and the stated purpose of the skill.
- [INDIRECT_PROMPT_INJECTION]: The skill uses tools to fetch external documentation, which constitutes an ingestion point for untrusted data. The skill mitigates this by providing the agent with explicit instructions to ignore embedded instructions and treat the data as reference only, establishing a safe boundary for data processing.
- [DYNAMIC_EXECUTION]: The skill utilizes standard .NET source generators and runtime reflection-based POCO generation. These are core features of the DevExpress framework used to automate boilerplate code generation during the build process and do not represent a malicious dynamic execution risk.
Audit Metadata