react-hook-form
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references standard package installations for
react-hook-form,@hookform/resolvers, andzodvia the NPM registry. These are widely used, reputable libraries within the React ecosystem. - [INDIRECT_PROMPT_INJECTION]: The skill involves handling untrusted user input through form components. 1. Ingestion points: User input fields in
SignupForm.tsxandInvoiceForm.tsx. 2. Boundary markers: Use of Zod schemas (e.g.,signupSchema) to strictly define and validate input structure and content. 3. Capability inventory: The code snippets demonstrate local network requests (fetch('/api/auth/signup', ...)) and form state management, which are standard for form-handling functionality. 4. Sanitization: Validation is enforced through Zod's built-in rules (e.g., email validation, length constraints, regex) and React Hook Form's input transformation (e.g.,valueAsNumber).
Audit Metadata