syncfusion-aspnetcore-ai-assistview
Warn
Audited by Socket on Sep 22, 2026
1 alert found:
AnomalyAnomalyreferences/generative-ui.md
LOWAnomalyLOW
references/generative-ui.md
The code is a legitimate generative UI example with no evident malware, data theft, persistence, command execution, or sabotage. The principal security risks are client-side exposure of any real API key and unsafe HTML construction from recipe/tool/AI-controlled values. Production code should keep API keys server-side, validate and allowlist AI blocks and properties, and HTML-escape or safely DOM-construct all interpolated content.
Confidence: 97%Severity: 58%
Audit Metadata