skills/syncfusion/spreadsheet-editor-sdk-skills/syncfusion-aspnetmvc-spreadsheet-editor/Gen Agent Trust Hub
syncfusion-aspnetmvc-spreadsheet-editor
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the creation of applications that ingest untrusted data from Excel files and remote API endpoints, creating a potential surface for indirect prompt injection attacks where malicious data could influence agent behavior.
- Ingestion points: The component utilizes controller actions (e.g., the Open action in SpreadsheetController.cs) and the dataSource property to load external content.
- Boundary markers: The skill's security policy in SKILL.md explicitly instructs the agent to use boundary markers and validate data types when extracting content from files.
- Capability inventory: The generated code includes network operations via openUrl and saveUrl endpoints, as well as UI rendering of complex spreadsheet data.
- Sanitization: The skill includes a dedicated Security section providing guidance to developers on validating user-supplied URLs and sanitizing spreadsheet content before use.
Audit Metadata