react-hook-form-zod
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a utility script
scripts/check-versions.shthat uses thenpm viewcommand to query package metadata from the official npm registry. This is a standard development practice for verifying dependency versions. - [EXTERNAL_DOWNLOADS]: The
templates/package.jsonfile and accompanying documentation reference well-known and trusted libraries includingreact,react-hook-form,zod, and@hookform/resolvers. While some version numbers (e.g.,zod@4.1.12) appear future-dated, they refer to legitimate package names on the public npm registry. - [SAFE]: The skill focuses on secure and accessible coding patterns. It explicitly instructs users to implement server-side validation to prevent client-side bypasses and provides detailed guidance on WCAG compliance, including ARIA attributes and focus management.
Audit Metadata