skills/syncfusion/aspnetcore-ui-components-skills/syncfusion-aspnetcore-smart-paste/Gen Agent Trust Hub
syncfusion-aspnetcore-smart-paste
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of documentation for the Syncfusion Smart Paste component. All external references, such as CDN links for stylesheets and scripts, point to official vendor domains (syncfusion.com). The implementation instructions follow standard development practices for the Syncfusion ecosystem.
- [EXTERNAL_DOWNLOADS]: The documentation references external CSS and JavaScript files from
https://cdn.syncfusion.com. These are recognized as well-known, vendor-provided resources necessary for the component to function. - [PROMPT_INJECTION]: The skill describes a system that processes untrusted clipboard data using AI to populate form fields. This creates a surface for indirect prompt injection where malicious instructions in the clipboard could attempt to influence the AI's parsing behavior.
- Ingestion points: Clipboard data is processed by the component at runtime (as described in
references/getting-started.md). - Boundary markers: The documentation does not explicitly detail delimiters or system-level instructions used to separate clipboard data from the AI's operational prompt.
- Capability inventory: The component's primary capability is to populate HTML form fields (text inputs, selects, radios, etc.) based on AI inference.
- Sanitization: No specific sanitization or filtering of the raw clipboard data is discussed in the provided documentation snippets.
Audit Metadata