skills/syncfusion/javascript-ui-controls-skills/syncfusion-javascript-circular-gauge/Gen Agent Trust Hub
syncfusion-javascript-circular-gauge
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official Syncfusion Essential JS 2 library files via the vendor's CDN (
cdn.syncfusion.com) and standard npm packages (@syncfusion/ej2-circulargauge). These resources are used for legitimate component rendering and conform to established vendor distribution practices. - [INDIRECT_PROMPT_INJECTION]: The skill describes functionality that allows rendering user-supplied HTML content within gauge annotations. It provides specific security guidance in
references/annotations.md, warning developers not to insert unsanitized user input into HTML strings and providing best practices for mitigation.
Audit Metadata