skills/syncfusion/javascript-ui-controls-skills/syncfusion-javascript-form-renderer/Gen Agent Trust Hub
syncfusion-javascript-form-renderer
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to clone the
ej2-quickstart-webpackproject and install@syncfusionpackages. These resources originate from the vendor's official GitHub and NPM accounts. - [REMOTE_CODE_EXECUTION]: The quickstart guide includes steps to clone an external repository and run the application locally using
npm run start. These steps target the vendor's official example project. - [INDIRECT_PROMPT_INJECTION]: The Form Renderer ingests data from remote URLs which could introduce malicious content. 1. Ingestion points: Remote data sources for dropdown options and grid data, as documented in
references/remote-data-binding-in-components.md. 2. Boundary markers: No delimiters are specified in the provided schema documentation for remote data. 3. Capability inventory: The skill can render custom widget templates and HTML content, which can be driven by ingested data. 4. Sanitization: A security sanitizer is provided viaenableHtmlSanitizer, though it is not enabled by default.
Audit Metadata