Individual skill
react-hook-form-audit
Audits a Next.js (App Router, 14/15+) codebase for React Hook Form anti-patterns — watch() at form root, Controller inlined in parent, async submit without try/catch, missing setError on server failures, RHF in non-"use client" files, RHF mixed with useActionState, schemas defined inside components, useFieldArray without field.id keys, register({ disabled }) for visual disabling, useFieldArray({ disabled }) that silently no-ops mutations, useEffect+reset(data) instead of the values prop. Read-only; emits a markdown report with file:line citations linking back to the companion `react-hook-form` distillation skill. Trigger when the user asks to audit/review/lint RHF usage, find form anti-patterns, or run a quality check on forms — even if they don't say "react-hook-form" by name; if they mention auditing forms in a Next.js project, use this skill.
skills/.curated/react-hook-form-audit/SKILL.md
Source commit cf93c57cac89d6fc3e4194686000411567f5caf3
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- No
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Not checked yet
- Last checked
- Nov 5, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 222
- Repository last updated
- Aug 15, 2026
- License
- MIT
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- design Derived category
- data Derived category
- security Derived category
- engineering Derived category
- engineering-web Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 6,350 bytesSKILL.mdcore · 6,350 bytesSKILL.mdcore · 6,350 bytesSKILL.mdcore · 6,350 bytesSKILL.mdcore · 6,350 bytesSKILL.mdcore · 6,350 bytesconfig.jsonasset · 1,357 bytesgotchas.mddoc · 1,517 bytesmetadata.jsonasset · 809 bytesreferences/detectors.mddoc · 14,622 bytesreferences/workflow.mddoc · 7,712 bytesscripts/.gitignoreruns · 32 bytesscripts/audit.shruns · 5,210 bytesscripts/collect-files.shruns · 1,336 bytesscripts/detect-ast.mjsruns · 20,961 bytesscripts/detect-fast.shruns · 3,276 bytesscripts/detect-project.shruns · 1,918 bytesscripts/package.jsonruns · 281 bytesscripts/render-report.mjsruns · 4,603 bytes
Read excerpt
# React Hook Form Audit for Next.js
Static-analysis audit that detects 16 React Hook Form anti-patterns in Next.js App Router codebases. Combines ripgrep (fast pass for regex-detectable rules) with ts-morph (AST pass for structural rules). Outputs a markdown report grouped by severity, with file:line references and links back to the companion `react-hook-form` distillation skill.
## When to Apply
- User asks to audit, review, or lint React Hook Form usage in a Next.js project
- User reports symptoms like "the form re-renders too much" or "we have RHF bugs we can't pin down"
- Before a PR review of new RHF-heavy code
- As a CI gate (exit code 1 on CRITICAL/HIGH findings)
- After upgrading react-hook-form, to catch advice that drifted
## Tool Requirements
- `rg` (ripgrep) — install via `brew install ripgrep` or your package manager