skills/syncfusion/react-ui-components-skills/syncfusion-react-modern-rich-text-editor/Gen Agent Trust Hub
syncfusion-react-modern-rich-text-editor
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The component is designed to ingest and process rich text content in HTML or JSON formats, which creates a potential surface for indirect prompt injection if malicious instructions are embedded in the data being edited or displayed.
- Ingestion points: The
valueproperty of theRichTextEditorUIComponentused for loading content (documented in SKILL.md and references/getting-started.md). - Boundary markers: No explicit prompt boundary markers or "ignore instructions" delimiters are documented for the content processed by the editor.
- Capability inventory: The skill documents network-based capabilities including image uploads to remote endpoints (references/image.md) and link insertion (references/links.md).
- Sanitization: The skill highlights security practices such as using
allowedProtocolsto prevent the execution of malicious scripts (e.g.,javascript:) via hyperlinks (references/links.md).
Audit Metadata