syncfusion-angular-scheduler
Warn
Audited by Snyk on Mar 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's Data Binding documentation and examples (see references/data-binding.md and the "Remote Data Binding" / AJAX examples using DataManager URLs like https://js.syncfusion.com/demos/ejservices/api/Schedule/LoadData and https://services.syncfusion.com/angular/production/api/Schedule) explicitly instruct the component to fetch and ingest events from public third‑party endpoints, which the agent would read/interpret at runtime and could materially influence scheduling behavior.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata