syncfusion-blazor-spreadsheet-editor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill includes required reference snippets that fetch and ingest untrusted third‑party content (e.g., "OPEN FROM REMOTE JSON URL" and "OPEN FROM GOOGLE DRIVE" in references/open-save.md which use HttpClient.GetStringAsync for arbitrary URLs and the Google Drive API to download files), so the agent can be exposed to user-provided web data that is parsed and used to drive generated code and behavior.