syncfusion-wpf-ui-builder

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes standard .NET CLI commands (dotnet new, dotnet add package, dotnet restore, dotnet build) to scaffold projects, manage dependencies, and validate generated code. These operations are essential for its stated purpose as a WPF UI builder.
  • [COMMAND_EXECUTION]: It executes a local Node.js script (controls_search.cjs) included with the skill to perform BM25 semantic search for mapping UI elements to Syncfusion controls. The script's logic is limited to file I/O on the project's own configuration files.
  • [EXTERNAL_DOWNLOADS]: The skill manages the installation of Syncfusion WPF libraries and themes from the official NuGet registry. These are verified vendor resources corresponding to the skill's author.
  • [SAFE]: No hardcoded credentials or sensitive data were detected. References to SYNCFUSION_LICENSE_KEY are handled via environment variables or user prompts, following secure configuration practices.
  • [SAFE]: The skill implements a robust, multi-layered validation protocol (Build.md and Stage 7) that checks for WPF SDK compliance, XAML structural integrity, and MVVM binding correctness before performing any file insertions.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 04:04 PM
Security Audit — agent-trust-hub — syncfusion-wpf-ui-builder