forms-and-input
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a development tool for Expo apps focusing on form validation, accessibility, and keyboard management.
- [COMMAND_EXECUTION]: The provided scripts (check-forms.mjs and check-lib.mjs) use Node.js built-ins like
child_process.spawnSyncexclusively for self-testing purposes, running local scripts within temporary directories. - [DYNAMIC_EXECUTION]: The skill uses dynamic
import()to load local dependencies (such aspngjs) from the skill's tooling directory or node_modules. This is a standard pattern for these specialized checker utilities. - [EXTERNAL_DOWNLOADS]: The documentation references well-known, established packages from the NPM registry (react-hook-form, valibot, react-native-keyboard-controller) for standard installation by the developer.
- [DATA_EXPOSURE]: No hardcoded credentials or sensitive file access patterns were found. A 'defused' private key pattern is used in test fixtures to simulate mock data without containing actual secrets.
Audit Metadata