kirby-forms-and-frontend-actions
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The instructions mandate standard security practices for web development, including CSRF token verification for POST requests, mandatory input normalization, and the use of honeypots for spam protection.\n- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the handling of untrusted user input from frontend forms, creating a potential attack surface. However, it provides clear defensive requirements:\n
- Ingestion points: Data provided by users through frontend forms and file uploads defined in SKILL.md.\n
- Boundary markers: Instructions require the implementation of controller-driven validation and CSRF checks to separate untrusted input from system logic.\n
- Capability inventory: The skill uses a suite of platform tools (e.g., kirby:kirby_init, kirby:kirby_search, kirby:kirby_render_page) to manage the CMS environment.\n
- Sanitization: The workflow explicitly requires escaping output in templates, normalizing filenames, and enforcing MIME type and file size limits before persistence.
Audit Metadata