syncfusion-javascript-chat-ui

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's required workflow and examples explicitly fetch and ingest external, user-generated chat content and files (e.g., references/events.md's created handler calls fetch('/api/messages') to load messages; references/load-on-demand.md uses fetch(/api/messages?page=...) and a WebSocket 'wss://api.example.com/chat'; file-attachment examples use external saveUrl/removeUrl), meaning untrusted third-party content is read and can influence runtime behavior.