devextreme-datasource

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation and implementation patterns for the DevExtreme framework. All code snippets and references align with the stated purpose of configuring data stores and binding UI components to data sources.
  • [INDIRECT_PROMPT_INJECTION]: The skill documents methods for ingesting data from external APIs (REST, OData) into the application via CustomStore and ODataStore. While this creates an attack surface for indirect prompt injection if malicious data is processed, the skill does not implement dangerous operations (like eval or shell execution) on the ingested data and provides standard framework patterns.
  • [DATA_EXFILTRATION]: The skill includes code snippets for performing network operations using fetch and Angular's HttpClient to load and save data. These operations target placeholder or well-known public test endpoints and are fundamental to the skill's purpose of data binding.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 11:52 AM