skills/syncfusion/javascript-ui-controls-skills/syncfusion-javascript-file-manager/Gen Agent Trust Hub
syncfusion-javascript-file-manager
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and examples for a legitimate enterprise file management component. All implementation patterns align with documented developer workflows.
- [EXTERNAL_DOWNLOADS]: The skill references several official Syncfusion repositories on GitHub (e.g., within the
SyncfusionExamplesorganization) for file system provider examples. It also uses official Syncfusion CDNs for styling and scripts. These resources are traced to the vendor's infrastructure. - [DATA_EXFILTRATION]: The skill implements file upload and download functionality as its primary purpose. No unauthorized or suspicious exfiltration patterns were identified; operations are directed to user-configured server endpoints.
- [INDIRECT_PROMPT_INJECTION]: The skill documents a component that processes external data (file metadata), which constitutes an attack surface for indirect injection.
- Ingestion points: Data enters the component via
ajaxSettingsendpoints and thefileSystemDataproperty inSKILL.mdandreferences/advanced-configuration.md. - Boundary markers: No specific natural language boundary markers are used to delimit metadata from instructions.
- Capability inventory: The component supports file CRUD operations, including
deleteFiles,renameFile, anduploadFiles(SKILL.md, references/file-operations.md). - Sanitization: The component includes a built-in
enableHtmlSanitizer(enabled by default) to mitigate cross-site scripting (XSS) and similar injection risks.
Audit Metadata