devextreme-form

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The 'Smart Paste' feature enables the agent to process unstructured text (e.g., from a clipboard) to automatically populate form fields using an AI service.
  • Ingestion points: The feature ingests unstructured text via the smartPaste button item or the smartPaste(text) method as described in references/ai-smart-paste.md.
  • Boundary markers: The skill documentation does not provide instructions for using delimiters or safety warnings (e.g., "ignore embedded instructions") for the ingested text.
  • Capability inventory: The skill possesses the capability to programmatically modify form field values using updateData and execute event-based logic in onSmartPasting and onSmartPasted.
  • Sanitization: There is no mention of sanitizing or validating the unstructured input text before it is processed by the AI integration.
  • [EXTERNAL_DOWNLOADS]: The skill references external resources required for AI-driven form filling features.
  • Details: Fetches the dx.ai-integration.js module from Cloudflare's well-known CDN and provides example configurations for routing AI requests to an external backend service at https://my-backend.com/ai.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 12:11 PM