The Agent Skills Directory

[SAFE]: The skill contains no malicious code, obfuscation, or data exfiltration patterns. The instructions focus on legitimate development practices.
[EXTERNAL_DOWNLOADS]: The skill references industry-standard packages (react-hook-form, zod, and @hookform/resolvers) from the official npm registry. Although the version numbers provided in the documentation appear to be future-dated or placeholders, the package names themselves are well-known and trusted.
[COMMAND_EXECUTION]: A utility script (scripts/check-versions.sh) is included to verify package versions using the npm view command. This is a standard developer tool for dependency management and does not pose a security risk.
[INDIRECT_PROMPT_INJECTION]: While the skill involves processing user input via forms, it explicitly teaches how to sanitize and validate this data using Zod schemas on both the client and server, which is a key defense against injection attacks.

react-hook-form-zod