Skip to main content

react-forms

Provides a comprehensive React forms system with validation, dynamic fields, and file upload handling for enhanced user experience.

Install this skill

or
44/100

Security score

The react-forms skill was audited on Feb 21, 2026 and we found 12 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 489

Template literal with variable interpolation in command context

SourceSKILL.md
489{...register(`members.${index}.name` as const, {
medium line 500

Template literal with variable interpolation in command context

SourceSKILL.md
500{...register(`members.${index}.email` as const, {
medium line 505

Template literal with variable interpolation in command context

SourceSKILL.md
505<select {...register(`members.${index}.role` as const)}>
medium line 713

Template literal with variable interpolation in command context

SourceSKILL.md
713const tempId = `temp-${Date.now()}`;
medium line 804

Template literal with variable interpolation in command context

SourceSKILL.md
804className={`input ${error ? 'input-error' : ''} ${className || ''}`}
medium line 806

Template literal with variable interpolation in command context

SourceSKILL.md
806aria-describedby={error ? `${name}-error` : undefined}
medium line 811

Template literal with variable interpolation in command context

SourceSKILL.md
811<span id={`${name}-error`} className="error-message" role="alert">
medium line 858

Template literal with variable interpolation in command context

SourceSKILL.md
858className={`select ${error ? 'select-error' : ''}`}
medium line 1076

Template literal with variable interpolation in command context

SourceSKILL.md
1076className={`dropzone ${isDragging ? 'dragging' : ''}`}
medium line 1097

Template literal with variable interpolation in command context

SourceSKILL.md
1097<li key={`${file.name}-${index}`}>
medium line 1225

Template literal with variable interpolation in command context

SourceSKILL.md
1225className={`step ${index <= currentStep ? 'active' : ''}`}
low line 974

Fetch to external URL

SourceSKILL.md
974const response = await fetch('/api/upload', {
Scanned on Feb 21, 2026
View Security Dashboard