skills/syncfusion/javascript-ui-controls-skills/syncfusion-javascript-image-editor/Gen Agent Trust Hub
syncfusion-javascript-image-editor
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: No security issues detected. The skill provides extensive documentation for implementing a professional image editor component following security best practices.
- [EXTERNAL_DOWNLOADS]: Fetches the official @syncfusion/ej2-image-editor package and its required dependencies from the NPM registry. The skill explicitly instructs users to verify package integrity using npm audit or third-party analysis tools before deployment.
- [DATA_EXFILTRATION]: The skill uses methods like open and export to load and save image data, which are standard functionalities for an image editor. Documentation provides clear warnings about validating URL inputs to prevent Server-Side Request Forgery (SSRF) and indirect injection attacks.
- [PROMPT_INJECTION]: The skill defines a surface for processing external data through the open method. Ingestion points: open(url) in SKILL.md and references/core-operations.md. Boundary markers: warnings in SKILL.md instructing users to validate and sanitize URL inputs. Capability inventory: full range of canvas manipulation (drawText, crop, rotate, filters) and export methods in references/api.md. Sanitization: instructions in SKILL.md and references/core-operations.md to validate URLs against a trusted allowlist.
Audit Metadata