formisch
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the
valibotpackage and various@formisch/*framework-specific packages from the npm registry. These are standard dependencies for the library described. - [COMMAND_EXECUTION]: The documentation includes standard shell commands for package installation (e.g.,
npm install @formisch/react). These are provided as usage examples for the developer. - [REMOTE_CODE_EXECUTION]: The skill references a Model Context Protocol (MCP) server at
https://formisch.dev/mcp. This is a standard mechanism for providing agents with tool access to documentation and is hosted on the vendor's domain. - [DATA_EXFILTRATION]: Code examples include a
fetchcall to a local/api/loginendpoint. This is a common pattern for demonstrating form submission and does not represent an exfiltration risk.
Audit Metadata