form-auto-save
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides a template for automatic form saving, which establishes a data ingestion surface.
- Ingestion points: The implementation listens to standard and custom change events on form elements, including rich text editors.
- Boundary markers: No explicit client-side boundary markers are present in the snippets.
- Capability inventory: The code includes capabilities to perform network requests (PATCH) to external URLs via the Stimulus controller.
- Sanitization: The skill notes that backend validation is required, which is a standard security practice for this pattern.
Audit Metadata