web-forms-zod-validation
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documentation and code examples promote secure input validation practices. It correctly instructs developers to use
safeParsefor untrusted data, which returns a result object instead of throwing exceptions, facilitating robust error handling. - [SAFE]: The patterns include explicit validation of external data sources (API responses, form inputs, URL parameters) before the data is used within the application logic, which is a key security practice for preventing injection attacks.
- [SAFE]: Reusable schemas and derived types via
z.inferare encouraged, reducing the risk of synchronization errors between validation logic and type definitions. - [SAFE]: The use of named constants for validation limits (e.g.,
MIN_USERNAME_LENGTH) is recommended as a best practice for maintainability and clarity, avoiding 'magic numbers' in security-critical validation logic.
Audit Metadata