skills/syncfusion/javascript-ui-controls-skills/syncfusion-javascript-form-builder/Gen Agent Trust Hub
syncfusion-javascript-form-builder
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the download of official packages like
@syncfusion/ej2-form-builderfrom the NPM registry and the cloning of a boilerplate project from the SyncfusionExamples organization on GitHub. - [COMMAND_EXECUTION]: The documentation includes standard developer commands for environment setup, specifically
npm installfor dependency management andgit clonefor retrieving sample code. - [INDIRECT_PROMPT_INJECTION]: The form builder component is designed to process external form schemas and remote data from APIs. This capability represents an ingestion surface for untrusted data. The skill addresses this by documenting the
enableHtmlSanitizerproperty, which is intended to sanitize HTML content in custom templates to prevent cross-site scripting (XSS). - [DATA_EXFILTRATION]: The skill describes how to connect form components to remote endpoints for data binding. The examples include references to official vendor services and a well-known mocking service (Beeceptor) used for development and testing purposes.
Audit Metadata