syncfusion-javascript-excel
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate coding assistant for the Syncfusion JavaScript Excel library. It provides extensive documentation and snippets for creating and editing Excel files.
- [PROMPT_INJECTION]: The PI_CONCEALMENT static analysis hint in
references/capability-boundaries.mdis a false positive. The document actually instructs the agent not to silently swallow errors and details how to handle unknown file parts (OOXML) safely, which is a standard requirement for office document libraries. - [EXTERNAL_DOWNLOADS]: The skill references the official
@syncfusion/ej2-xlsxpackage on the NPM registry and links to official Syncfusion documentation. These are trusted resources associated with the library's vendor. - [INDIRECT_PROMPT_INJECTION]: The skill addresses the potential risk of processing untrusted Excel files by explicitly instructing the agent and the generated code to treat formulas and hyperlinks as plain text and to never resolve external links or execute macros.
Audit Metadata