react-hook-form-zod

Pass

Audited by Gen Agent Trust Hub on May 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a utility script scripts/check-versions.sh that uses the npm view command to query package metadata from the official npm registry. This is a standard development practice for verifying dependency versions.
  • [EXTERNAL_DOWNLOADS]: The templates/package.json file and accompanying documentation reference well-known and trusted libraries including react, react-hook-form, zod, and @hookform/resolvers. While some version numbers (e.g., zod@4.1.12) appear future-dated, they refer to legitimate package names on the public npm registry.
  • [SAFE]: The skill focuses on secure and accessible coding patterns. It explicitly instructs users to implement server-side validation to prevent client-side bypasses and provides detailed guidance on WCAG compliance, including ARIA attributes and focus management.
Audit Metadata
Risk Level
SAFE
Analyzed
May 9, 2026, 03:36 PM