form-generator-rhf-zod
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill generates React components and validation schemas based on field specifications provided in a JSON file, creating an ingestion surface for potentially untrusted data.
- Ingestion points: The
fields.jsonfile used by the generation scripts as described in the documentation. - Boundary markers: None identified in the skill instructions to separate data from instructions.
- Capability inventory: The skill performs local file system writes and executes local Python scripts.
- Sanitization: No explicit sanitization or validation of the input JSON structure is described beyond the generation process.
- [COMMAND_EXECUTION]: The skill utilizes local Python scripts (
generate_form.pyandgenerate_zod_schema.py) to automate the creation of code assets, which is the primary intended functionality. - [SAFE]: The skill leverages and recommends the installation of industry-standard, trusted libraries and tools, including React Hook Form, Zod, and shadcn/ui. No malicious code or exfiltration patterns were identified.
Audit Metadata