syncfusion-maui-ui-builder
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill orchestrates the execution of standard .NET CLI commands (dotnet add package, dotnet build) to manage dependencies and verify project integrity. These actions are aligned with the skill's primary purpose of assisting in .NET MAUI development.
- [COMMAND_EXECUTION]: A Node.js script (controls_search.cjs) included in the skill is used to perform component mapping via the BM25 algorithm. Analysis of the script confirms it is restricted to local file I/O for its configuration and mapping data.
- [EXTERNAL_DOWNLOADS]: The skill references official Syncfusion NuGet packages and well-known image services (Unsplash) for UI generation. These are trusted sources for development assets.
- [DATA_EXFILTRATION]: The process involves handling a Syncfusion license key. The skill provides clear instructions for the agent to register this key locally within the application's MauiProgram.cs file. There is no evidence of the key or any project data being exfiltrated to external third-party domains.
- [PROMPT_INJECTION]: The skill incorporates a robust validation stage (Stage 6) governed by references/maui-dotnet-standards.md, which explicitly checks for security best practices (e.g., avoiding hardcoded secrets, validating inputs) in the generated code.
Audit Metadata