syncfusion-vue-pivot-table
Warn
Audited by Snyk on Apr 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill explicitly documents and requires binding to remote URLs and external data sources (see "Data Binding & Sources" and references/data-binding.md and references/connecting-to-data-source.md) and supports DataManager UrlAdaptor, remote CSV/JSON loading and file uploads, meaning the agent ingests third-party/user-provided web data at runtime which can materially influence pivot behavior and thereby enable indirect prompt injection.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata