syncfusion-javascript-scheduler

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's documentation includes explicit runtime flows that fetch and ingest external/public content — e.g., DataManager/UrlAdaptor and Ajax examples in references/data-binding.md and references/resources.md (including Google Calendar binding and remote Url examples like 'url'/'Home/GetData') — which cause the agent to read and act on untrusted third‑party data (events) that can materially influence scheduling behavior and event-driven handlers.