Form Builder
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing several well-known and trusted Node.js packages, including
pdf-libfor PDF generation,expressfor web server functionality,validatorfor data sanitization, andnodemailerfor email services. - [COMMAND_EXECUTION]: The skill uses the Node.js
fsmodule to write generated form content to the local file system viafs.writeFileSync. This is a core part of its intended functionality for document creation. - [SAFE]: No patterns associated with prompt injection, credential exfiltration, or persistence mechanisms were detected. The code behavior is transparent and aligns with the stated purpose of building data collection tools.
Audit Metadata