syncfusion-aspnetcore-ui-builder

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs the agent to accept a user-provided SYNCFUSION_LICENSE_KEY and add it to appsettings.json (and register it in Program.cs), which requires the LLM to output the secret value verbatim into generated files.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Stage 1 reads the user’s raw natural-language query (“Read the user's raw query carefully”) and Stage 4’s component mapper then uses that outsider-authored free text to select components and drives which component SKILL.md files get read and used for code generation.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill automatically runs dotnet package install/restore commands at runtime (Stage 6) using the NuGet source URL https://api.nuget.org/v3/index.json, which fetches and installs remote packages (i.e., external code) required for generation and therefore is a runtime external dependency that executes remote code.