xaf-office
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official DevExpress NuGet packages, such as
DevExpress.ExpressApp.FileAttachmentsandDevExpress.ExpressApp.Spreadsheet. These are well-known libraries for the DevExpress eXpressApp Framework. - [COMMAND_EXECUTION]: Code snippets demonstrate the use of standard .NET file system APIs (
File.OpenReadandFile.WriteAllBytes) to handle document data, which is consistent with the skill's stated purpose of document management. - [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for ingesting and processing external document formats including Excel, Word, and PDF files.
- Ingestion points:
IFileData.LoadFromStream,Workbook.LoadDocument, andRichEditDocumentServer.LoadDocumentinSKILL.md. - Boundary markers: Absent in the provided code templates.
- Capability inventory: File system write operations (
File.WriteAllBytes) and database commits (objectSpace.CommitChanges). - Sanitization: Content validation is not explicitly demonstrated in the basic setup examples.
Audit Metadata