syncfusion-blazor-docx-editor
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation references downloading Hunspell dictionaries from the well-known
wooorm/dictionariesGitHub repository to support multi-language spell-checking functionality.- [COMMAND_EXECUTION]: Provides standard instructions to install official Syncfusion and utility packages, such asSyncfusion.Blazor.WordProcessorandNewtonsoft.Json, via thedotnetCLI.- [INDIRECT_PROMPT_INJECTION]: The skill is designed to load and process external.docxfiles, which represents an attack surface for indirect prompt injection. - Ingestion points: Files are ingested through the
WordDocument.Loadmethod in scripts found inreferences/blazor-documenteditor-server.mdandreferences/blazor-documenteditor-webapp.md. - Boundary markers: No specific delimiters or warnings for the agent regarding embedded instructions within documents were identified.
- Capability inventory: The agent can perform file system modifications to project files when explicitly requested by the user and can interact with external spell-check APIs.
- Sanitization: The skill utilizes standard SDK methods for document parsing without additional content sanitization logic.
Audit Metadata