devextreme-form
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The 'Smart Paste' feature enables the agent to process unstructured text (e.g., from a clipboard) to automatically populate form fields using an AI service.
- Ingestion points: The feature ingests unstructured text via the
smartPastebutton item or thesmartPaste(text)method as described inreferences/ai-smart-paste.md. - Boundary markers: The skill documentation does not provide instructions for using delimiters or safety warnings (e.g., "ignore embedded instructions") for the ingested text.
- Capability inventory: The skill possesses the capability to programmatically modify form field values using
updateDataand execute event-based logic inonSmartPastingandonSmartPasted. - Sanitization: There is no mention of sanitizing or validating the unstructured input text before it is processed by the AI integration.
- [EXTERNAL_DOWNLOADS]: The skill references external resources required for AI-driven form filling features.
- Details: Fetches the
dx.ai-integration.jsmodule from Cloudflare's well-known CDN and provides example configurations for routing AI requests to an external backend service athttps://my-backend.com/ai.
Audit Metadata