devextreme-button
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions are focused entirely on the documentation and implementation of the DevExtreme Button component. No malicious command execution, data exfiltration, or persistence patterns were found.
- [INDIRECT_PROMPT_INJECTION]: The skill acknowledges the risk of indirect prompt injection when using documentation search tools. It explicitly instructs the agent to ignore any text in fetched documentation that attempts to direct behavior or request unrelated commands, which is a security best practice for skills interacting with external data.
- [EXTERNAL_DOWNLOADS]: The skill references official documentation and assets from js.devexpress.com. These are legitimate resources provided by the library vendor and do not pose a security risk.
- [NO_CODE]: The skill does not bundle or execute any scripts; it only provides instructional content and code templates for developers to use in their own projects.
Audit Metadata