devexpress-wpf-scheduler
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate technical documentation and code samples for the DevExpress WPF Scheduler component. It uses official NuGet packages such as DevExpress.Wpf.Scheduling and standard installation commands like dotnet add package. No malicious patterns or unauthorized behaviors were identified.\n- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the development of applications that process and display data from external sources.\n
- Ingestion points: Untrusted data enters the application context via the DataSource bindings, including AppointmentsSource and ResourcesSource, as documented in SKILL.md and references/data-binding.md.\n
- Boundary markers: The documentation does not specify the use of delimiters or special markers to isolate user-supplied fields such as appointment subjects or notes.\n
- Capability inventory: The skill describes UI rendering and data persistence mechanisms through lifecycle events like AppointmentAdded and AppointmentEdited in references/data-binding.md.\n
- Sanitization: The provided code examples do not incorporate explicit sanitization of the data fields before display.
Audit Metadata