syncfusion-wpf-pdf-viewer

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Anomaly
AnomalyLOW
references/annotation.md

The fragment is legitimate PDF annotation configuration and documentation code. The principal security concern is that a PDF-controlled file path is passed directly to Process.Start, enabling arbitrary local file or executable launch upon a file-link click. This is a security warning requiring validation or user confirmation, but the fragment does not otherwise show malicious behavior.

Confidence: 97%Severity: 53%
Audit Metadata
Analyzed At
Sep 17, 2026, 10:01 AM
Package URL
pkg:socket/skills-sh/syncfusion%2Fpdf-viewer-sdk-skills%2Fsyncfusion-wpf-pdf-viewer%2F@73f0514ed8b194b50646debafa122988272c26605cf8a8ecd0e9a1121a5ca25e
Security Audit — socket — syncfusion-wpf-pdf-viewer