Skip to main content

form-security

Implements security patterns for web forms to enhance user data protection and prevent common vulnerabilities.

Install this skill

or
72/100

Security score

The form-security skill was audited on Feb 9, 2026 and we found 6 security issues across 4 threat categories, including 1 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

medium line 421

Template literal with variable interpolation in command context

SourceSKILL.md
421return res.redirect(`https://${req.headers.host}${req.url}`);
low line 253

Fetch to external URL

SourceSKILL.md
253const response = await fetch('/api/submit', {
low line 301

Fetch to external URL

SourceSKILL.md
301fetch('/api/submit', {
high line 3

Prompting for password/secret input

SourceSKILL.md
3description: Security patterns for web forms including autocomplete attributes for password managers, CSRF protection, XSS prevention, and input sanitization. Use when implementing authentication form
medium line 386

Prompting for password/secret input

SourceSKILL.md
386<div className="password-input">
low line 421

External URL reference

SourceSKILL.md
421return res.redirect(`https://${req.headers.host}${req.url}`);
Scanned on Feb 9, 2026
View Security Dashboard