form-https
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The file
references/rule.mdcontains an 'Audit Script' section providinggrepcommands for scanning local source code files to identify insecurehttp://links in HTML form actions and JavaScriptfetch/XMLHttpRequestcalls. These commands are intended for local auditing purposes. - [EXTERNAL_DOWNLOADS]: The skill contains references to documentation and security guidelines from authoritative sources, including MDN (Mozilla Developer Network), web.dev (Google), and the OWASP Foundation. These links are used for educational context and do not involve the download of executable code.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing untrusted data by instructing the agent to scan local source code files. While this is an ingestion point for external content, the risk is minimized as the skill uses static pattern matching (
grep) and does not dynamically execute or interpret the code it reads.
Audit Metadata