syncfusion-javascript-barcode
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides comprehensive documentation and code examples for using the Syncfusion Barcode Generator library. Analysis of the instructions and referenced files shows no evidence of malicious patterns, obfuscation, or unauthorized access to sensitive data.
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install official packages from the npm registry and provides a link to the vendor's quickstart repository on GitHub (https://github.com/syncfusion/ej2-quickstart.git). These are standard installation procedures for the vendor's library and originate from a well-known service.
- [DATA_EXFILTRATION]: Documentation in 'export-printing.md' and 'validation-events.md' demonstrates how to transmit generated barcode data or validation requests to a server-side API using the fetch API. These examples use local path placeholders (e.g., '/api/save-barcode') and explicitly recommend security measures like JWT authentication and CSRF tokens, representing intended functionality rather than malicious exfiltration.
- [PROMPT_INJECTION]: The skill handles untrusted data input via the 'value' property for barcode generation. This surface is addressed by the author through detailed guides on input validation, character set filtering, and data sanitization in the 'validation-events.md' file, documenting the ingestion points and sanitization methods to prevent indirect injection.
Audit Metadata