syncfusion-aspnetcore-popups
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill describes components like Dialogs and Tooltips that can render HTML content provided by the application. This creates a surface for indirect prompt injection if malicious instructions are embedded in the data being displayed. However, the documentation explicitly mentions and recommends the use of the
enableHtmlSanitizerfeature, which is enabled by default to mitigate such risks. - Ingestion points:
contentproperties and templates across several files, includingSKILL.mdandreferences/tooltip-content.md. - Boundary markers: Standard HTML/Razor tags are used, but no specific prompt-isolation delimiters are implemented.
- Capability inventory: The skill facilitates DOM manipulation and client-side interaction through component events.
- Sanitization: Built-in HTML sanitization is available and enabled by default for the documented components.
- [EXTERNAL_DOWNLOADS]: Fetches styles and scripts from Syncfusion's official CDN to support component rendering and styling.
Audit Metadata