ng-forms
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for ingesting and processing untrusted user data through Angular forms, which presents a vulnerability surface for indirect prompt injection.
- Ingestion points: User input is collected via standard HTML input elements bound with the
[formField]directive, as shown inSKILL.mdandreferences/build-a-form.md. - Boundary markers: Input fields are clearly delimited by Angular template syntax and managed by the Signal Forms API structure.
- Capability inventory: The skill demonstrates submitting form data to authentication services (
AuthService) and performing validation via local API endpoints (/api/check-username). - Sanitization: The skill relies on Angular's built-in framework protections and type-safe signal models for data handling.
Audit Metadata