Skills
skills/syncfusion/react-ui-components-skills/syncfusion-react-dropdownlist/Gen Agent Trust Hub

syncfusion-react-dropdownlist

Pass

Audited by Gen Agent Trust Hub on Mar 25, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documentation includes instructions to install the @syncfusion/ej2-react-dropdowns package and provides examples of fetching data from remote endpoints such as services.odata.org and services.syncfusion.com, which are well-known and vendor-controlled services.
  • [PROMPT_INJECTION]: Identifies an indirect prompt injection surface where the component ingests data via the dataSource property. A specific implementation pattern in references/how-to.md uses dangerouslySetInnerHTML for search highlighting, which is a standard UI pattern for this component but identifies a surface where untrusted data could execute script if the data source is not properly sanitized.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 25, 2026, 04:27 PM