skills/syncfusion/aspnetcore-ui-components-skills/syncfusion-aspnetcore-tree-view/Gen Agent Trust Hub
syncfusion-aspnetcore-tree-view
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a documentation resource for a well-known enterprise UI library (Syncfusion). All implementation patterns provided are standard for ASP.NET Core development.
- [DATA_EXPOSURE]: The documentation includes examples of sending data to server-side endpoints (e.g.,
/TreeView/UpdateNodePosition,/TreeView/UpdateNodeText) and usinglocalStoragefor UI state persistence. These are legitimate web development practices for synchronization and user experience. - [REMOTE_CODE_EXECUTION]: The skill mentions external dependencies such as the
Syncfusion.EJ2.AspNet.CoreNuGet package. This is a standard dependency for the described functionality. - [CREDENTIALS_UNSAFE]: The documentation demonstrates how to register a license key using a placeholder string (
"YOUR_LICENSE_KEY"). This follows safe practice by instructing the developer to provide their own key without including a hardcoded secret. - [INDIRECT_PROMPT_INJECTION]: The skill involves processing and rendering hierarchical data. The component documentation explicitly mentions
enableHtmlSanitizer="true"as a default setting to prevent XSS attacks. While any component processing external data has an indirect prompt injection surface, the use of boundary markers and built-in sanitization minimizes this risk.
Audit Metadata