syncfusion-aspnetcore-smart-paste

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow involves “Send clipboard data to AI” (clipboard contents are free-form text authored by the user/other parties), which can include outsider-provided text and then gets placed into the LLM context via the Smart Paste inference call.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's runtime instructions include loading the remote CDN script https://cdn.syncfusion.com/ej2/33.1.44/dist/ej2.min.js (and related CDN assets) which will execute remote code in the client and is presented as a required dependency for the Smart Paste component.