syncfusion-wpf-markdown-viewer
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [SAFE]: The skill documentation follows security best practices by providing implementation patterns that minimize attack surfaces when rendering potentially untrusted Markdown content.\n- [EXTERNAL_DOWNLOADS]: Documentation includes secure examples for fetching remote content via HttpClient. These patterns incorporate essential security checks, such as origin validation (verifying against a trusted base URL) and media-type verification (ensuring the response is text/markdown) before processing the data.\n- [DYNAMIC_EXECUTION]: The integration of Mermaid diagrams is documented with robust validation steps. Examples demonstrate how to enforce length constraints on diagram definitions and verify diagram type prefixes (e.g., flowchart) to mitigate risks associated with malformed or malicious diagram input.\n- [DATA_EXFILTRATION]: Hyperlink navigation is managed through a cancel-by-default architecture. The provided code snippets demonstrate how to correctly validate internal app:// routes against an explicit allowlist and restrict external links to the HTTPS scheme, preventing unauthorized navigation or information leak attempts.
Audit Metadata