falcondev-form
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides comprehensive technical documentation, implementation examples, and API references for a reactive form management library. No unauthorized commands, hardcoded credentials, or persistence mechanisms are present in the provided files.\n- [EXTERNAL_DOWNLOADS]: The documentation mentions the installation and use of official libraries including
@falcondev-oss/form-core,@falcondev-oss/form-react, and@falcondev-oss/form-vue. These resources are identified as vendor-provided components necessary for the skill's functionality.\n- [PROMPT_INJECTION]: The skill describes an architecture for processing external data through form inputs, which represents a standard indirect injection surface.\n - Ingestion points: Data enters the system via the
sourceValuesproperty during form initialization inuseForm(SKILL.md).\n - Boundary markers: The library explicitly uses
Standard Schemadefinitions (such as Zod or Arktype) to enforce data boundaries and types.\n - Capability inventory: The skill documents a
submithook that executes asynchronous operations, such as API calls, using the processed form data.\n - Sanitization: Data is subject to schema-based validation before being passed to the
submithandler, ensuring it conforms to expected structures.
Audit Metadata