syncfusion-react-dropdowns
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill consists entirely of documentation and implementation guides for official Syncfusion React components. The content is technical and focuses on standard UI development patterns.
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install official Node.js packages from the Syncfusion vendor (e.g.,
@syncfusion/ej2-react-dropdowns,@syncfusion/ej2-base). These are well-known, trusted libraries corresponding to the skill's stated purpose. - [INDIRECT_PROMPT_INJECTION]: The documentation describes components that ingest data from external sources (APIs). It proactively includes security guidance, recommending the use of trusted server-side proxies to validate and sanitize responses before rendering.
- [CREDENTIALS_UNSAFE]: Code examples for authentication headers correctly use non-functional placeholders such as
YOUR_TOKENor${authToken}. No real secrets or credentials are exposed.
Audit Metadata