react-hook-form-zod
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a thorough documentation and template resource for React form development. It adheres to security best practices, such as explicitly recommending and demonstrating server-side validation alongside client-side checks to prevent validation bypasses.
- [EXTERNAL_DOWNLOADS]: The skill references standard, well-known libraries from the NPM registry (
react-hook-form,zod,@hookform/resolvers). These are legitimate dependencies for the stated purpose of the skill. - [COMMAND_EXECUTION]: A utility script (
scripts/check-versions.sh) is included to query package versions using the standardnpm viewcommand. This is a benign development tool and does not involve downloading or executing untrusted remote code. - [INDIRECT_PROMPT_INJECTION]: The skill provides templates for handling user input via forms. It mitigates injection risks by enforcing strict validation schemas using Zod, ensuring that data processed by the application conforms to expected structures and types before execution or storage.
Audit Metadata