form-types-validation
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the generation of security-sensitive code (validation, access control) from external inputs, creating an indirect prompt injection surface.\n
- Ingestion points: The agent using this skill reads project files and user-defined requirements to generate validation logic (SKILL.md).\n
- Boundary markers: There are no explicit instructions to treat user-provided requirements as untrusted or to use delimiters when processing code generation tasks.\n
- Capability inventory: The skill utilizes
Write,Edit, andBashcapabilities, which could be misused if the agent follows malicious instructions embedded in user requirements.\n - Sanitization: The skill lacks instructions for sanitizing or verifying user-provided data before it is incorporated into generated Symfony entities or forms.
Audit Metadata