form-validation-scan
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a 'READ-ONLY rule' that strictly instructs the agent to use fake data (e.g., test@example.com) and avoid form submissions. It specifically uses checkValidity() checks to ensure no accidental submissions occur during the audit process.
- [EXTERNAL_DOWNLOADS]: The report template references the author's website, helpmetest.com. This is a standard vendor resource and does not present a security risk.
- [COMMAND_EXECUTION]: The skill utilizes standard Playwright MCP tools (browser_navigate, browser_snapshot, browser_evaluate, browser_click, browser_type) to interact with the DOM for auditing purposes. The use of browser_evaluate is restricted to data extraction and does not execute arbitrary code from untrusted sources.
Audit Metadata