react-hook-form-audit
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to execute the project's TypeScript compiler and existing test runners to verify suspected defects during the auditing process.
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes project source code and tests, which introduces an attack surface for instructions embedded in the data being processed. 1. Ingestion points: Files that import
react-hook-formand their supporting files (schemas, components, tests). 2. Boundary markers: No explicit delimiters or 'ignore' instructions are provided to isolate the agent from instructions within the code being audited. 3. Capability inventory: The agent can read local files and execute local command-line tools liketscor test suites. 4. Sanitization: No sanitization or validation of the audited code content is described.
Audit Metadata