syncfusion-aspnetcore-ai-assistview

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Anomaly
AnomalyLOW
references/generative-ui.md

The code is a legitimate generative UI example with no evident malware, data theft, persistence, command execution, or sabotage. The principal security risks are client-side exposure of any real API key and unsafe HTML construction from recipe/tool/AI-controlled values. Production code should keep API keys server-side, validate and allowlist AI blocks and properties, and HTML-escape or safely DOM-construct all interpolated content.

Confidence: 97%Severity: 58%
Audit Metadata
Analyzed At
Sep 22, 2026, 02:09 PM
Package URL
pkg:socket/skills-sh/syncfusion%2Faspnetcore-ui-components-skills%2Fsyncfusion-aspnetcore-ai-assistview%2F@b53df0d2a761a9ac1f6ee8cdf253ab5626df0751c51a21c69eb3b8c09a6e7161
Security Audit — socket — syncfusion-aspnetcore-ai-assistview