syncfusion-angular-treegrid
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No attempts to override agent behavior or bypass safety filters were found. The use of terms like 'CRITICAL' and 'IMPORTANT' in the documentation refers to coding requirements (e.g., mandatory properties for the component), not agent instructions.
- [DATA_EXPOSURE]: No hardcoded credentials, sensitive file paths, or private keys were detected. The skill explicitly identifies the risks of storing sensitive data in unencrypted browser storage (localStorage/sessionStorage) and provides clear security warnings to developers against this practice.
- [OBFUSCATION]: No encoded content, multi-layer Base64, zero-width characters, or homoglyph attacks were found in the instructions or code snippets. All documentation is in plain text and standard TypeScript/HTML.
- [REMOTE_CODE_EXECUTION]: The skill does not perform or suggest remote script execution via piped shell commands. It references standard, versioned packages from the official Syncfusion registry, which is a recognized and trusted vendor.
- [INDIRECT_PROMPT_INJECTION]: The skill documents how to ingest data for rendering in a UI component. It follows standard Angular component patterns and does not introduce specific vulnerability surfaces that would bypass agent safety protocols.
- [DYNAMIC_CONTEXT_INJECTION]: No dynamic shell execution patterns (e.g., backtick commands) were found in the skill metadata or instructions.
Audit Metadata