skills/syncfusion/javascript-ui-controls-skills/syncfusion-javascript-modern-rich-text-editor/Gen Agent Trust Hub
syncfusion-javascript-modern-rich-text-editor
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the installation of the Syncfusion Rich Text Editor and theme packages from the official npm registry. Evidence includes installation commands such as npm install @syncfusion/ej2-richtexteditor-ui and npm install @syncfusion/ej2-tailwind3-theme in the getting-started.md reference file.
- [INDIRECT_PROMPT_INJECTION]: The Rich Text Editor component processes untrusted content, representing a standard attack surface for indirect prompt injection. (1) Ingestion points: The value property and getHtml() method handle external HTML or JSON data. (2) Boundary markers: No explicit delimiters are specified for content instructions. (3) Capability inventory: Supports network operations for image uploads via the uploadUrl setting and complex content manipulation. (4) Sanitization: The linkSettings.allowedProtocols property provides mitigation by restricting URL schemes.
Audit Metadata