syncfusion-blazor-dropdowns
Warn
Audited by Snyk on Apr 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The SKILL.md explicitly shows runtime fetching and ingestion of open/public third‑party data (e.g., SfDataManager Url="YOUR_API_ENDPOINT", the GitHub search example in Advanced Features, and HttpClient/GetAsync in OnActionComplete/OnFiltering) which would load untrusted/user-generated content that the component and its event handlers read and act on to influence suggestions and subsequent actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata