syncfusion-vue-3d-circular-chart

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the processing of external or user-provided data to populate chart visualizations. This data is often rendered through HTML-based string templates for tooltips and data labels, which creates a potential surface for indirect prompt injection if the data contains malicious instructions intended to influence the agent's behavior.
  • Ingestion points: The dataSource property in the e-circularchart3d-series component, which is used in SKILL.md and various reference files, serves as the primary ingestion point for external data.
  • Boundary markers: Absent. The skill does not instruct the agent to use specific delimiters or 'ignore' instructions when handling data for visualization.
  • Capability inventory: The skill demonstrates the ability to render HTML templates for dataLabel and tooltip properties, and includes examples of fetching data from network endpoints (advanced-features.md).
  • Sanitization: Absent. There are no instructions for sanitizing, escaping, or validating the dataSource content before it is interpolated into chart templates.
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of the @syncfusion/ej2-vue-charts package and its core dependencies from the npm registry. These are legitimate, versioned resources from a recognized vendor and are appropriate for the skill's stated purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 02:09 PM
Security Audit — agent-trust-hub — syncfusion-vue-3d-circular-chart