skills/syncfusion/aspnetmvc-ui-components-skills/syncfusion-aspnetmvc-inline-ai-assist/Gen Agent Trust Hub
syncfusion-aspnetmvc-inline-ai-assist
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a legitimate collection of documentation and integration guides for the Syncfusion ASP.NET MVC Inline AI Assist control. All referenced resources, including CDN links for CSS and JavaScript, originate from official and trusted Syncfusion domains.
- [PROMPT_INJECTION]: The documentation describes a design pattern for processing external AI content that presents a surface for indirect prompt injection. Specifically, code examples in SKILL.md and references/getting-started.md show AI-generated responses being assigned to the DOM via the innerHTML property without explicit sanitization.
- Ingestion points: External AI responses are received in the promptRequest handler and processed by the addResponse method.
- Boundary markers: No specific delimiters or safety instructions are demonstrated in the example code to separate AI data from UI commands.
- Capability inventory: The skill demonstrates capabilities to modify page content (innerHTML) and access the clipboard (navigator.clipboard.writeText).
- Sanitization: No escaping or sanitization of the response content is shown in the integration examples, which is a common pattern in getting-started documentation but constitutes a potential risk surface in production environments.
Audit Metadata