Skip to main content

better-forms

Provides a comprehensive guide for creating accessible, high-UX forms using modern web technologies like React and Tailwind.

Install this skill

or
38/100

Security score

The better-forms skill was audited on Feb 27, 2026 and we found 14 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 212

Template literal with variable interpolation in command context

SourceSKILL.md
212aria-label={`Digit ${index + 1} of ${length}`}
medium line 502

Template literal with variable interpolation in command context

SourceSKILL.md
502`/api/check-username?username=${encodeURIComponent(value)}`
medium line 613

Template literal with variable interpolation in command context

SourceSKILL.md
613const errorId = `${dropzoneId}-error`;
medium line 622

Template literal with variable interpolation in command context

SourceSKILL.md
622setError(`${file.name} exceeds maximum size`);
medium line 680

Template literal with variable interpolation in command context

SourceSKILL.md
680{accept && `Accepted: ${accept}`}
medium line 681

Template literal with variable interpolation in command context

SourceSKILL.md
681{maxSize && ` (Max: ${formatBytes(maxSize)})`}
medium line 722

Template literal with variable interpolation in command context

SourceSKILL.md
722const listboxId = `${inputId}-listbox`;
medium line 774

Template literal with variable interpolation in command context

SourceSKILL.md
774aria-activedescendant={activeIndex >= 0 ? `${listboxId}-option-${activeIndex}` : undefined}
medium line 799

Template literal with variable interpolation in command context

SourceSKILL.md
799id={`${listboxId}-option-${index}`}
medium line 854

Template literal with variable interpolation in command context

SourceSKILL.md
854onChange={(e) => onChange(`${e.target.value}-${day}-${year}`)}
medium line 1343

Template literal with variable interpolation in command context

SourceSKILL.md
1343const descriptionId = `${id}-desc`;
medium line 1344

Template literal with variable interpolation in command context

SourceSKILL.md
1344const errorId = `${id}-error`;
low line 417

Fetch to external URL

SourceSKILL.md
417const response = await fetch("/api/register", {
low line 881

External URL reference

SourceSKILL.md
881// See: https://react-day-picker.js.org/guides/accessibility
Scanned on Feb 27, 2026
View Security Dashboard
Installation guide →