syncfusion-react-grid

Warn

Audited by Snyk on Mar 25, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill's documentation and required workflow explicitly show the Grid consuming remote, public APIs via DataManager adaptors (e.g., UrlAdaptor/OData/GraphQL in references/adaptors.md and SKILL.md) — the grid is expected to fetch and interpret untrusted third‑party responses as part of normal operation, and those responses are used to drive behavior (queries, CRUD, error handling like redirectToLogin), creating a clear avenue for indirect prompt‑injection-like influence.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 25, 2026, 04:10 PM
Issues
1