syncfusion-wpf-ui-builder
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard .NET CLI commands (
dotnet new,dotnet add package,dotnet restore,dotnet build) to scaffold projects, manage dependencies, and validate generated code. These operations are essential for its stated purpose as a WPF UI builder. - [COMMAND_EXECUTION]: It executes a local Node.js script (
controls_search.cjs) included with the skill to perform BM25 semantic search for mapping UI elements to Syncfusion controls. The script's logic is limited to file I/O on the project's own configuration files. - [EXTERNAL_DOWNLOADS]: The skill manages the installation of Syncfusion WPF libraries and themes from the official NuGet registry. These are verified vendor resources corresponding to the skill's author.
- [SAFE]: No hardcoded credentials or sensitive data were detected. References to
SYNCFUSION_LICENSE_KEYare handled via environment variables or user prompts, following secure configuration practices. - [SAFE]: The skill implements a robust, multi-layered validation protocol (
Build.mdand Stage 7) that checks for WPF SDK compliance, XAML structural integrity, and MVVM binding correctness before performing any file insertions.
Audit Metadata