mobx-formkit-composer

Pass

Audited by Gen Agent Trust Hub on Sep 6, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill provides a utility to aggregate data from multiple independent form instances. This creates a surface where untrusted user input is collected into structured objects (values/errors) that may be processed by an agent.
  • Ingestion points: Form data aggregated through forms.validate() and forms.submit() methods described in SKILL.md.
  • Boundary markers: None specified in the documentation or code snippets to delimit form data from instructions.
  • Capability inventory: The skill facilitates aggregation of data and implied network submission via the submit method.
  • Sanitization: No explicit sanitization or validation of the content within the form fields is mentioned beyond structural validation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 6, 2026, 03:12 PM
Security Audit — agent-trust-hub — mobx-formkit-composer