syncfusion-react-buttons
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides documentation and code examples for UI components. It adheres to security best practices by enabling HTML sanitization by default for content that could be vulnerable to Cross-Site Scripting (XSS).
- [EXTERNAL_DOWNLOADS]: The skill references official NPM packages from the author (@syncfusion/ej2-react-buttons, @syncfusion/ej2-react-splitbuttons, etc.). These are standard dependencies required for the functionality of the components described.
- [INDIRECT_PROMPT_INJECTION]: The skill documents components that render content provided via properties (e.g., content, itemTemplate). This represents a standard web attack surface (XSS). However, the components include a built-in 'enableHtmlSanitizer' property (which defaults to true) specifically to mitigate this risk, and the documentation emphasizes its importance for security.
Audit Metadata