syncfusion-vue-diagram
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a standard documentation set for the Syncfusion Vue Diagram library. It contains legitimate code snippets for Vue 2 and Vue 3, instructions for package installation via npm, and patterns for data visualization. All external resource references target the official Syncfusion domain or well-known package registries.
- [INDIRECT_PROMPT_INJECTION]: The skill documents methods for ingesting data from external sources, such as Mermaid syntax parsing (
loadDiagramFromMermaid) and remote data binding viaDataManager. While these represent an ingestion surface for potentially untrusted data, the capabilities associated with this skill are limited to UI rendering and serialization, posing no significant risk of command execution or data exfiltration. - [REMOTE_CODE_EXECUTION]: The skill references standard package installation commands (e.g.,
npm install @syncfusion/ej2-vue-diagrams). These are official vendor-owned packages and do not involve piped remote execution or unknown sources.
Audit Metadata