syncfusion-maui-kanban-board

Warn

Audited by Snyk on Mar 26, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.70). The skill's documentation explicitly shows runtime fetching and ingestion of remote, potentially untrusted content — e.g., references/data-binding.md ("Pattern 1: Loading from API" with LoadTasksFromAPI), references/columns.md ("Pattern 5: Dynamic Column Creation" using GetColumnConfigsFromAPI), and references/cards.md (ImageURL can be a URL like "https://...") — which would cause the agent/app to read/interpret third‑party data that can materially change UI, columns, and workflow behavior.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 26, 2026, 02:52 AM
Issues
1