devexpress-xaf-reports

Pass

Audited by Gen Agent Trust Hub on Aug 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides legitimate instructions for configuring the DevExpress XAF Reports V2 module in .NET applications.
  • [SAFE]: All external URLs point to official vendor documentation at docs.devexpress.com.
  • [SAFE]: The skill includes security best practices, specifically advising developers to use parameterized CriteriaOperator.Parse calls instead of string concatenation to prevent injection vulnerabilities.
  • [SAFE]: All referenced NuGet packages (e.g., DevExpress.ExpressApp.ReportsV2.Blazor) are standard platform components provided by the vendor.
  • [DATA_INDIRECT_INJECTION]: The skill documents data ingestion surfaces via CollectionDataSource and ViewDataSource, which load business objects from the database for reporting. This is the primary function of the module and the skill includes appropriate guidance on using parameterized filters to secure this boundary.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 18, 2026, 01:48 PM
Security Audit — agent-trust-hub — devexpress-xaf-reports