xaf-dashboards
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references several NuGet packages from DevExpress, including
DevExpress.ExpressApp.Dashboards,DevExpress.ExpressApp.Dashboards.Blazor, andDevExpress.ExpressApp.Dashboards.Win. These are official components from a well-known technology vendor. - [INDIRECT_PROMPT_INJECTION]: The skill documents patterns for storing and loading dashboard layouts via XML using
XDocument.Parse. This represents a potential data ingestion surface common in analytics tools. - Ingestion points:
IXafDashboardStorage.LoadDashboardinSKILL.mdaccesses stored dashboard content from the database. - Boundary markers: None provided in the simplified code snippets.
- Capability inventory: The skill includes logic for file reading (seeding) and database persistence (storage).
- Sanitization: The implementation relies on the default security settings of the .NET
XDocumentparser, which provides protection against common XML-based attacks.
Audit Metadata