formio-api
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill documents endpoints that ingest user-generated content (submissions, form definitions). This represents a standard surface for indirect prompt injection common to data-processing tools.\n
- Ingestion points: Submission retrieval (
GET /submission), report generation (POST /report), and form definition inspection (GET /form).\n - Boundary markers: The documentation does not specify explicit boundary markers for the data returned from these endpoints.\n
- Capability inventory: The skill uses the
formioFetchutility and various MCP tools (form_create,form_list, etc.) to perform network operations and project modifications.\n - Sanitization: No explicit sanitization or validation of the retrieved API data is described within the instruction set.
Audit Metadata