netlify-forms
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides documentation and usage guidelines for Netlify's serverless form handling service, which operates via build-time detection of HTML forms.
- [EXTERNAL_DOWNLOADS]: References external documentation and resources from official Netlify domains (netlify.com). As Netlify is a well-known service, these references are considered safe and are documented for user guidance.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent on how to read form submissions via the Netlify API. This constitutes an ingestion point for untrusted external data.
- Ingestion points: Netlify API (listFormSubmissions endpoint).
- Boundary markers: No explicit boundary markers are defined for the data processed from the API.
- Capability inventory: The skill describes reading data via API and provides general patterns for web form handling.
- Sanitization: The documentation explicitly states that Netlify automatically sanitizes submitted code by escaping script tags.
- [DATA_EXPOSURE]: The skill includes security-positive instructions that explicitly warn the agent against reading tokens from local CLI configuration files (e.g., ~/Library/Preferences/netlify/config.json).
Audit Metadata