skills/syncfusion/javascript-ui-controls-skills/syncfusion-javascript-rich-text-editor/Gen Agent Trust Hub
syncfusion-javascript-rich-text-editor
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides technical documentation and code samples for implementing the Syncfusion ej2-richtexteditor. All external dependencies and API endpoints described follow standard development practices for the Syncfusion ecosystem.
- [INDIRECT_PROMPT_INJECTION]: The AI Assistant feature described in
references/ai-assistant.mdrepresents an indirect prompt injection surface common in content editors. - Ingestion points: The
aiAssistantPromptRequestevent receivesargs.text(editor content) which is subsequently sent to an AI backend endpoint. - Boundary markers: The provided code examples for handling prompt requests do not demonstrate the use of delimiters to encapsulate untrusted user content before sending it to the LLM.
- Capability inventory: The editor supports
executeCommandandaddAIPromptResponsewhich allows the AI backend to programmatically insert HTML or Markdown into the editing surface. - Sanitization: The skill explicitly documentation the use of
enableHtmlSanitizer(which is enabled by default) inreferences/validation-security.mdto mitigate cross-site scripting (XSS) risks from the editor's output.
Audit Metadata