syncfusion-react-form-builder
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a legitimate technical guide for implementing the Syncfusion React Form Builder. No malicious patterns, obfuscation, or unauthorized access attempts were found.
- [EXTERNAL_DOWNLOADS]: The instructions involve installing standard vendor packages from NPM (@syncfusion/ej2-react-form-builder) and provide examples of remote data fetching from vendor-controlled domains (services.syncfusion.com).
- [INDIRECT_PROMPT_INJECTION]: The skill documentation details how the agent should handle user-provided form schemas and remote data sources. 1. Ingestion points: The schema and formTemplates properties of the FormBuilderComponent, and external data fetched via the url property in dataSource. 2. Boundary markers: The documentation emphasizes structured JSON schemas and provides clear interface definitions for implementation. 3. Capability inventory: The skill enables the creation and rendering of complex form layouts, validation logic, and calculated expressions, as well as handling field events (onFieldDropped, onFieldPropertyChanged). 4. Sanitization: The component includes an enableHtmlSanitizer property, which the documentation notes can be used to sanitize untrusted HTML in custom templates.
Audit Metadata