syncfusion-react-grid
Warn
Audited by Snyk on Mar 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's documentation and required workflow explicitly show the Grid consuming remote, public APIs via DataManager adaptors (e.g., UrlAdaptor/OData/GraphQL in references/adaptors.md and SKILL.md) — the grid is expected to fetch and interpret untrusted third‑party responses as part of normal operation, and those responses are used to drive behavior (queries, CRUD, error handling like redirectToLogin), creating a clear avenue for indirect prompt‑injection-like influence.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata