syncfusion-maui-licensing
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download a licensing validation utility (
LicenseKeyValidator.zip) and platform installers from official Syncfusion domains and vendor-controlled AWS S3 buckets. - [COMMAND_EXECUTION]: Documents the use of standard development and build commands, including NuGet package management and PowerShell/Bash scripts, to automate licensing checks and registration within CI/CD pipelines such as Azure Pipelines, GitHub Actions, and Jenkins.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a data ingestion surface where license keys are retrieved from environment variables.
- Ingestion points: Environment variables (e.g.,
SYNCFUSION_LICENSE_KEY) are read inMauiProgram.cs,App.xaml.cs, and CI/CD configuration files. - Boundary markers: None explicitly implemented in the provided code examples.
- Capability inventory: The ingested license key string is passed to a proprietary library method (
SyncfusionLicenseProvider.RegisterLicense) and a validation utility. It is not used for shell command construction or dynamic code execution. - Sanitization: Code examples include basic checks to ensure the license key string is not null or empty before processing.
Audit Metadata