smartx-development

Pass

Audited by Gen Agent Trust Hub on Jul 21, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill documents the legitimate development practices for the TOTVS Smart X framework, focusing on metadata-driven UI generation and stateless architecture.
  • [COMMAND_EXECUTION]: The documentation includes patterns for calling local ADVPL/TLPP routines using BuildAdvplAction and setRoutine. These are core framework features for implementing business logic and do not involve the execution of untrusted external scripts.
  • [DATA_EXFILTRATION]: Analysis of the data flow and integration patterns (such as oDataset:getFieldValue and interpolation like {{$selectedRow.*}}) shows they are used for standard UI-to-Model communication within the Protheus environment. No unauthorized network operations or exfiltration attempts were detected.
  • [PROMPT_INJECTION]: No malicious instructions, safety bypasses, or behavior overrides were found in the skill's metadata or instructional content.
  • [EXTERNAL_DOWNLOADS]: The skill does not perform any external downloads or reference untrusted remote repositories. All code examples use internal TOTVS namespaces and standard platform includes.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 21, 2026, 09:29 PM
Security Audit — agent-trust-hub — smartx-development