formkit-core-skilld

Pass

Audited by Gen Agent Trust Hub on Oct 11, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a technical reference for the FormKit Core framework. It provides instructional code snippets for creating form node trees, handling asynchronous value commits, and implementing plugin middleware, all following established framework best practices.
  • [SAFE]: External references are limited to official documentation on formkit.com and public release notes on the official GitHub repository for the FormKit organization.
  • [DYNAMIC_EXECUTION]: The skill documents the library's expression compiler (compile()). This is an inherent feature of the library designed to evaluate domain-specific logic in form schemas. The documentation describes a constrained grammar (logic and arithmetic operators) rather than exposing arbitrary code execution.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes a data-driven schema architecture. While the library processes structured data, the skill correctly identifies boundary markers such as the $-token prefix and specific schema node discriminators ($el, $cmp, $formkit) which act as delimiters for the engine.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 11, 2026, 07:46 AM