form-cro
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's functionality is consistent with its stated marketing purpose, with no malicious code or bypass attempts found.
- [COMMAND_EXECUTION]: The
scripts/form_field_analyzer.pyscript uses the standardhtml.parserlibrary to statically analyze HTML files. It does not execute shell commands or interact dangerously with the host system. - [DATA_EXFILTRATION]: No network activity or attempts to access sensitive system files or credentials were detected.
- [PROMPT_INJECTION]: The skill processes untrusted HTML data for analysis, creating an indirect prompt injection surface.
- Ingestion points: HTML files analyzed by
scripts/form_field_analyzer.py - Boundary markers: None
- Capability inventory: Static parsing only; no network, file-write, or execution capabilities
- Sanitization: Uses standard
html.parserto extract structural attributes without executing content. - [SAFE]: Metadata includes appropriate attribution and versioning consistent with the provided author context.
Audit Metadata