syncfusion-javascript-file-manager

Pass

Audited by Gen Agent Trust Hub on Mar 31, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation and examples for a legitimate enterprise file management component. All implementation patterns align with documented developer workflows.
  • [EXTERNAL_DOWNLOADS]: The skill references several official Syncfusion repositories on GitHub (e.g., within the SyncfusionExamples organization) for file system provider examples. It also uses official Syncfusion CDNs for styling and scripts. These resources are traced to the vendor's infrastructure.
  • [DATA_EXFILTRATION]: The skill implements file upload and download functionality as its primary purpose. No unauthorized or suspicious exfiltration patterns were identified; operations are directed to user-configured server endpoints.
  • [INDIRECT_PROMPT_INJECTION]: The skill documents a component that processes external data (file metadata), which constitutes an attack surface for indirect injection.
  • Ingestion points: Data enters the component via ajaxSettings endpoints and the fileSystemData property in SKILL.md and references/advanced-configuration.md.
  • Boundary markers: No specific natural language boundary markers are used to delimit metadata from instructions.
  • Capability inventory: The component supports file CRUD operations, including deleteFiles, renameFile, and uploadFiles (SKILL.md, references/file-operations.md).
  • Sanitization: The component includes a built-in enableHtmlSanitizer (enabled by default) to mitigate cross-site scripting (XSS) and similar injection risks.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 31, 2026, 09:54 AM