syncfusion-vue-pivot-table

Warn

Audited by Snyk on Apr 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 1.00). The skill explicitly documents and requires binding to remote URLs and external data sources (see "Data Binding & Sources" and references/data-binding.md and references/connecting-to-data-source.md) and supports DataManager UrlAdaptor, remote CSV/JSON loading and file uploads, meaning the agent ingests third-party/user-provided web data at runtime which can materially influence pivot behavior and thereby enable indirect prompt injection.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 16, 2026, 07:22 AM
Issues
1