fcode-forms
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the official forms SDK script located at
https://code.factorialhr.com/sdk/forms.js. Per the trust-scope-rule, this is a well-known service related to the Factorial HR platform and does not escalate the verdict. - [SAFE]: The documentation explicitly instructs users to keep secrets out of client-side code and embed options, recommending server-side environment variables instead.
- [SAFE]: Highlights that the SDK's markdown renderer automatically strips raw HTML tags to prevent cross-site scripting (XSS) when displaying process results.
- [SAFE]: Recommends the use of specific authentication modes (FACTORIAL) to ensure that sensitive forms are protected by workspace membership.
Audit Metadata