NYC

react-hook-form-zod

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • SAFE (SAFE): No malicious patterns or security vulnerabilities were detected in the skill files. The content consists of standard React, TypeScript, and Markdown files providing guidance on form validation.
  • COMMAND_EXECUTION (SAFE): The file scripts/check-versions.sh contains hardcoded commands using npm view to check for package updates. These operations are limited to metadata queries and do not involve the execution of arbitrary or untrusted remote code.
  • EXTERNAL_DOWNLOADS (SAFE): The README.md and templates/package.json reference legitimate NPM packages. While the version numbers for zod (4.1.12) and react-hook-form (7.66.1) are currently ahead of real-world stable releases, they point to the correct official package names.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 05:27 PM