syncfusion-angular-kanban
Warn
Audited by Snyk on Mar 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). This skill's documentation and workflow explicitly show remote data binding and fetching from external/public endpoints (see references/cards-and-data-binding.md with HttpClient.get('/api/tasks') and DataManager URLs including https://services.odata.org/V4/..., and references/data-persistence.md with fetch('/api/tasks')), so the agent would ingest untrusted third-party data that can influence card placement, events, and subsequent actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata