react-hook-form-zod
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides high-quality instructional content for React developers. The templates follow modern security standards by ensuring that all user inputs are validated against a schema before processing.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a surface where untrusted data (repository code and form inputs) is processed.
- Ingestion points: Per SKILL.md, the agent reads existing repository files, including component source code and configuration files, to understand the project context.
- Boundary markers: The instructions do not define specific markers for untrusted content ingestion, relying on the agent's internal safety protocols.
- Capability inventory: The skill utilizes fetch for data submission and provides logic for reading and writing local files as part of the form-building process.
- Sanitization: The skill incorporates Zod schemas (templates/schema.ts) to validate all ingested data, which serves as a primary defense against malformed or malicious inputs.
Audit Metadata