syncfusion-winforms-ui-builder

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The spec explicitly allows/asks the agent to prompt for a SYNCFUSION_LICENSE_KEY and then write it to app.config or inject a RegisterLicense() call, which requires the LLM to receive and emit the license value verbatim (secret exfiltration risk).

MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

• Hidden Unicode characters detected (1 type(s) found)