Create Web Form

AdvisoryAudited by Static analysis on May 12, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If a user asks this skill to create login, checkout, or account forms, the resulting code could handle sensitive user data and must be implemented securely.

Why it was flagged

The skill may guide generation of forms that handle passwords, payment data, or secrets. This is purpose-aligned for a web form skill and the text includes safer handling guidance, but users should recognize the sensitivity before deploying generated code.

Skill content
Collect passwords or payment data only when necessary; hash passwords server-side and prefer hosted payment fields or tokenization from a trusted processor
Recommendation

Review any generated form before deployment, avoid raw payment-card handling, use trusted payment tokenization, hash passwords server-side, and keep real secrets in environment variables or a secret manager.