syncfusion-dotnet-calculate
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a professional implementation for a well-known vendor's SDK and exhibits no malicious intent or suspicious behavior.
- [PROMPT_INJECTION]: The skill includes robust internal controls in SKILL.md, specifically a 'Consent & Destination Gate' that prevents the agent from creating or modifying files without explicit user verification and path confirmation.
- [EXTERNAL_DOWNLOADS]: All external references point to official Syncfusion NuGet packages and documentation sites. These are trusted vendor-controlled domains and do not originate from unverifiable or high-risk sources.
- [COMMAND_EXECUTION]: The commands described in the documentation, such as 'dotnet add package', are standard developer operations for .NET dependency management and do not involve piped execution from the internet or unauthorized shell access.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes user-defined formulas, it avoids vulnerability to indirect prompt injection by strictly limiting the agent's code generation context to the provided, verified technical reference files.
Audit Metadata