syncfusion-wpf-heatmap

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides documentation and implementation examples for a professional UI component. The namespaces and control structures match official Syncfusion WPF documentation. No suspicious remote code execution or data exfiltration patterns were identified.\n- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external data for UI rendering, which is a potential surface for indirect prompt injection if the source data is attacker-controlled.\n
  • Ingestion points: The ItemsSource property in SfHeatMap as shown in SKILL.md and references/getting-started.md targets data collections like ObservableCollection<CellData>.\n
  • Boundary markers: The skill uses standard WPF data binding, which does not provide natural delimiters for LLM instructions within the data stream.\n
  • Capability inventory: The skill is restricted to UI rendering, color mapping, and legend display; it does not include file-writing, network-sending, or process-execution capabilities linked to the ingested data.\n
  • Sanitization: The provided snippets do not include explicit validation or sanitization for the values mapped to the heatmap cells.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 03:57 PM
Security Audit — agent-trust-hub — syncfusion-wpf-heatmap