syncfusion-winforms-ui-builder
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a local Node.js utility (
controls_search.cjs) to perform semantic searches for Syncfusion controls based on user requirements. This script operates on local JSON and CSV data and does not perform network operations or execute untrusted shell commands. - [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install official Syncfusion NuGet packages (e.g.,
Syncfusion.Core.WinForms). These downloads originate from a well-known vendor and are managed through the standarddotnettoolchain, posing no significant security risk. - [CREDENTIALS_UNSAFE]: The skill manages Syncfusion license keys by encouraging users to store them in secure configurations like .NET User Secrets or application configuration files rather than hardcoding them into the source code.
- [PROMPT_INJECTION]: No evidence of prompt injection or instructions intended to bypass AI safety guardrails was found in the skill metadata or instructional content.
- [DATA_EXFILTRATION]: The skill does not contain logic for exfiltrating sensitive project data. Network requests are limited to official documentation and package management through trusted channels.
Audit Metadata