skills.rest
naporin0624
naporin0624COMMUNITY
Explore all skills by this author →
Website𝕏@naporin24690GitHub

form-security-analyzer

Analyzes HTML forms for CSRF tokens, insecure actions, missing validation, hidden field exposure and misconfigurations, generating text or JSON reports.

3|1|Updated Dec 23, 2025
Search Tags:#html#security#vulnerability#forms#input-validation#static-analysis#csrf
One-click install
npx skills add https://github.com/naporin0624/claude-web-audit-plugins --skill form-security-analyzer
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: form-security-analyzer
Source: https://github.com/naporin0624/claude-web-audit-plugins/tree/main/skills/form-security-analyzer
Command: npx skills add https://github.com/naporin0624/claude-web-audit-plugins --skill form-security-analyzer

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires cheerio.

What problem does it solve?

Static security analysis of HTML forms without sending any requests. Checks for CSRF tokens, insecure actions, missing validation, hidden field issues, and common misconfigurations.

Core Features & Use Cases

  • CSRF token presence checks
  • Insecure HTTP form actions detection
  • Flagging state-changing GET methods
  • Hidden field analysis for IDOR and sensitive data
  • Input validation and autocomplete checks
  • Inline event handlers detection
  • Clear text reports or JSON outputs for automation

Quick Start

  • Install: npm install
  • Build: npm run build
  • Analyze a file (JSON): npx tsx src/index.ts path/to/file.html --json
  • Analyze a file (text): npx tsx src/index.ts path/to/file.html

Frequently Asked Questions about form-security-analyzer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check HTML forms for CSRF vulnerabilities without sending requests?▼

CSRF token presence checks on static HTML forms detect missing protections against cross-site request forgery attacks. This Skill analyzes form code directly, identifying absent or misconfigured tokens without network activity, giving you immediate security visibility.

What form security issues can static HTML analysis detect?▼

Static HTML form analysis identifies CSRF token gaps, insecure HTTP actions, state-changing GET methods, hidden field exposure risks, missing input validation, and inline event handlers. This Skill flags these issues in a single scan with severity ratings.

Can I automate security checks on HTML forms during development?▼

Yes. This Skill parses HTML forms and generates JSON or text reports, enabling automated security scanning in CI/CD pipelines or local workflows. Run it on any HTML file to surface form vulnerabilities before deployment.

What's the difference between static form analysis and dynamic security testing?▼

Static analysis inspects form code directly without executing requests, catching misconfigurations, missing tokens, and insecure attributes instantly. Dynamic testing requires running the application; static checks complement it by finding issues in source code alone.

Do I need to set up a web server to analyze my HTML forms?▼

No. This Skill performs static inspection of local HTML files with no network requests or server required, making it safe to run on any form code in your repository or development environment.

Related Skills

Explore More Software Engineering Skills→
maslennikov-igmaslennikov-ig
243

extract-version

Extract semantic version strings from text into structured version objects.

Community
Basic
petrSimonidesXartpetrSimonidesXart

security-audit

Scan code, configurations, and deployments to generate vulnerability reports with remediation steps.

Community
Advanced
harperaaharperaa
15

csrf-protection

Implement HMAC-SHA256 CSRF token protection for POST, PUT, and DELETE API routes.

Community
Intermediate
jassicsjassics
6

mobile-pentest

Automate MASTG-based mobile penetration tests on Android and iOS apps.

Community
Advanced