syncfusion-aspnetmvc-inline-ai-assist
Warn
Audited by Socket on Jul 23, 2026
1 alert found:
AnomalyAnomalyreferences/commands-and-response.md
LOWAnomalyLOW
references/commands-and-response.md
No strong evidence of intentional malware/backdoor behavior is present in the provided code fragment. The main security concern is unsafe rendering: assigning AI-generated content into the DOM via `innerHTML` without visible sanitization/escaping, which could enable DOM XSS depending on upstream/component sanitization. Clipboard writing adds privacy/data exposure risk, and the manual prompt construction introduces prompt steering/control-flow risk rather than direct client compromise.
Confidence: 64%Severity: 60%
Audit Metadata