syncfusion-angular-pivot-table
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a documentation and reference set for the Syncfusion Angular Pivot Table component. It adheres to security best practices by providing prominent warnings about data validation and sanitization when working with external data sources.
- [INDIRECT_PROMPT_INJECTION]: The skill describes functionality for ingesting and displaying data from external sources (JSON, CSV, OLAP). While this represents a potential surface for indirect prompt injection, the skill includes extensive documentation and 'Critical Security Notices' in SKILL.md and references/core-concepts.md that explicitly instruct the user on how to mitigate these risks through validation and sanitization. 1. Ingestion points: Data binding from local and remote JSON, CSV, and OLAP sources is detailed in references/core-concepts.md and references/server-side-pivot-engine.md. 2. Boundary markers: The skill instructions don't provide explicit boundary markers for the data, but SKILL.md contains a 'CRITICAL SECURITY NOTICE' warning developers to validate and sanitize data. 3. Capability inventory: SKILL.md outlines capabilities including data visualization, aggregation, and analytical tools. All server-side operations are described as requiring authenticated and authorized backend APIs. 4. Sanitization: references/core-concepts.md provides specific code examples for validating data structures and sanitizing fields before binding data to the component.
- [DYNAMIC_EXECUTION]: The component supports calculated fields using mathematical expressions as described in references/calculated-field.md. This is a standard feature for data analysis components and is documented with security warnings regarding data source trust.
- [EXTERNAL_DOWNLOADS]: The skill mentions official Syncfusion NPM packages and remote data endpoints. All referenced URLs point to trusted Syncfusion domains (syncfusion.com, bi.syncfusion.com) or well-known services like GitHub (github.com/SyncfusionExamples), which are considered safe according to the vendor and service recognition rules.
Audit Metadata