Search Input
thedaviddias/Front-End-Checklist
A skill your agent uses when reviewing templates, rendered HTML, or shared components related to Make search inputs accessible.
Validate and constrain untrusted input at the boundary. An agent skill from Archive228/loopkit.
MITAuto-check passed
Install Input Validation
$ npx skills add Archive228/loopkit --skill input-validation -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install Archive228/loopkit input-validation --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/Archive228/loopkit.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/input-validation .claude/skills/input-validation && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "input-validation" agent skill from https://github.com/Archive228/loopkit/tree/main/skills/input-validation into .claude/skills/input-validation/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "input-validation", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/Archive228/loopkit/tree/main/skills/input-validationType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add Archive228/loopkit --skill input-validation -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install Archive228/loopkit input-validation --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/Archive228/loopkit.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/input-validation .agents/skills/input-validation && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "input-validation" agent skill from https://github.com/Archive228/loopkit/tree/main/skills/input-validation into .agents/skills/input-validation/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "input-validation", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add Archive228/loopkit --skill input-validation -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install Archive228/loopkit input-validation --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/Archive228/loopkit.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/input-validation .cursor/skills/input-validation && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "input-validation" agent skill from https://github.com/Archive228/loopkit/tree/main/skills/input-validation into .cursor/skills/input-validation/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "input-validation", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/Archive228/loopkit.git --path skills/input-validation--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add Archive228/loopkit --skill input-validation -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install Archive228/loopkit input-validation --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/Archive228/loopkit.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/input-validation .gemini/skills/input-validation && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "input-validation" agent skill from https://github.com/Archive228/loopkit/tree/main/skills/input-validation into .gemini/skills/input-validation/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "input-validation", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install Archive228/loopkit input-validationInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add Archive228/loopkit --skill input-validation -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/Archive228/loopkit.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/input-validation .github/skills/input-validation && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "input-validation" agent skill from https://github.com/Archive228/loopkit/tree/main/skills/input-validation into .github/skills/input-validation/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "input-validation", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add Archive228/loopkit --skill input-validation -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install Archive228/loopkit input-validation --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/Archive228/loopkit.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/input-validation .opencode/skills/input-validation && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "input-validation" agent skill from https://github.com/Archive228/loopkit/tree/main/skills/input-validation into .opencode/skills/input-validation/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "input-validation", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
input-validation- GitHub stars
- 755
- Token cost
- ~222 tokens
- SKILL.md length
- 98 words
- Files
- 1
- Skills in repo
- 52
- Repo updated
- First seen
- Licence
- MIT
At a glance
Validate and constrain untrusted input at the boundary. An agent skill from Archive228/loopkit.
- Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
What it does
Input Validation is an agent skill from Archive228/loopkit. Validate and constrain untrusted input at the boundary. Use on any handler that accepts external data.
Its SKILL.md is about 220 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
The repository describes itself as: 33 battle-tested skills + minimal .claude harness for any coding agent (Claude Code, Cursor, Codex, Gemini CLI). The licence is MIT.
Example prompts
- “/input-validation”
What it can do on your machine
Read from SKILL.md and the folder at commit 5ae033e. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
No scripts in the folder and no shell commands in SKILL.md.
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Input Validation loads about 222 tokens when it runs. Until then it costs about 30 tokens; SKILL.md has 98 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from Archive228/loopkit at commit 5ae033e, republished under its MIT licence (© Archive228). 98 words, ~222 tokens.
Download SKILL.mdSave it as
.claude/skills/input-validation/SKILL.md (or your agent's skills folder).- name
- input-validation
- description
- Validate and constrain untrusted input at the boundary. Use on any handler that accepts external data.
- when_to_use
- request bodies, query params, file uploads, webhook payloads, form data
Input Validation
Validate at the edge, before the data touches logic or storage.
- Schema — type, required fields, allowed values. Reject unknown fields rather than ignoring them.
- Bounds — string length, number ranges, array size. An unbounded input is a DoS and a memory bomb.
- Format — emails, UUIDs, dates parsed and re-validated, not trusted as strings.
- Files — size limit, type allowlist (check content, not just extension), no path traversal in names.
- Reject with a clear 4xx and a message that says what's wrong — without leaking internals. Never trust "it comes from our own frontend". The request can come from anywhere.
© Archive228, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
Just SKILL.md in skills/input-validation of Archive228/loopkit.
Open the folder on GitHubat commit 5ae033e
Compare with similar skills
Input Validation next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Input Validation this skillArchive228/loopkit | 755 | — | ~222 | Automated safety check: Pass | MIT | |
| Search Inputthedaviddias/Front-End-Checklist | 74k | — | ~402 | Automated safety check: Pass | MIT | |
| Input Typesthedaviddias/Front-End-Checklist | 74k | — | ~487 | Automated safety check: Pass | MIT | |
| Paste Inputsthedaviddias/Front-End-Checklist | 74k | — | ~443 | Automated safety check: Pass | MIT | |
| Od Next Media Inputsnexu-io/open-design | 100k | — | ~1.1k | Automated safety check: Pass | Apache-2.0 | |
| Aria Input Field Namethedaviddias/Front-End-Checklist | 74k | — | ~853 | Automated safety check: Pass | MIT |
Similar skills
Input Types
thedaviddias/Front-End-Checklist
A skill your agent uses when reviewing templates, rendered HTML, or shared components related to Use semantic input type attributes.
Paste Inputs
thedaviddias/Front-End-Checklist
A skill your agent uses when reviewing rendered HTML, interactive components, or design-system patterns related to Allow pasting into form inputs.
Od Next Media Inputs
nexu-io/open-design
Prepare required media inputs within an existing OD Next plan.
Aria Input Field Name
thedaviddias/Front-End-Checklist
A skill your agent uses when applies to all <input (except type=hidden), <textarea, <select, and custom form widgets using role=textbox, role=combobox, role=spinbutton, role=searchbox, or…
Resolve Inputs
omnigent-ai/omnigent
Select the Resolve mode, recover its input, check the workspace, and discover existing fixes.
More from Archive228/loopkit
All 52 skills in this repoHitl Escalate
Archive228/loopkit
Escalate blocked runs to a human via configured channel or fallback to BLOCKED.md and exit the loop.
Structured Output
Archive228/loopkit
Get JSON out of the model reliably. An agent skill from Archive228/loopkit.
Using Loopkit
Archive228/loopkit
A skill your agent uses when starting any conversation in a loopkit-enabled project - establishes how to find and use loopkit's 49 skills, requiring skill invocation before ANY response including…
Active Memory Reminder
Archive228/loopkit
Before compaction Loopkit extracts decisions into claude-decisions.json (machine-readable).
Eval Harness
Archive228/loopkit
Build a repeatable eval loop that grades agent output with an LLM judge, so prompt/skill changes get scored against a baseline instead of eyeballed.
Feature List JSON
Archive228/loopkit
Enumerate every end-to-end feature as strict JSON entries with passes:false, editable-passes-only discipline, and priority order.
Questions about Input Validation
What does Input Validation do?
Validate and constrain untrusted input at the boundary. An agent skill from Archive228/loopkit. Input Validation is an agent skill from Archive228/loopkit. Validate and constrain untrusted input at the boundary.
How do I install Input Validation in Claude Code?
Run `npx skills add Archive228/loopkit --skill input-validation -a claude-code`. Or copy the skill folder (skills/input-validation in Archive228/loopkit) into .claude/skills/input-validation in your project. Claude Code loads it when a task matches its description.
How do I install Input Validation in Codex?
Run `npx skills add Archive228/loopkit --skill input-validation -a codex`. Or copy the skill folder (skills/input-validation in Archive228/loopkit) into .agents/skills/input-validation in your project. Codex loads it when a task matches its description.
Can I use Input Validation in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add Archive228/loopkit --skill input-validation -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/input-validation, .gemini/skills/input-validation, .github/skills/input-validation and .opencode/skills/input-validation in your project.
What does Input Validation need to run?
SKILL.md names no scripts, command-line tools or credentials: Input Validation is instructions for the agent only.
Does Input Validation access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Input Validation safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Input Validation use?
Input Validation is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Input Validation use?
About 222 tokens (SKILL.md is roughly 888 characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Input Validation?
Skills that share tags, products or a category with Input Validation: Search Input (thedaviddias/Front-End-Checklist, 74k stars), Input Types (thedaviddias/Front-End-Checklist, 74k stars), Paste Inputs (thedaviddias/Front-End-Checklist, 74k stars) and Od Next Media Inputs (nexu-io/open-design, 100k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Input Validation?
Archive228 (a GitHub user) maintains it in Archive228/loopkit, which has 755 GitHub stars. The repository holds 52 skills in this directory. The repository was last updated on July 14, 2026.
Source: Archive228/loopkit on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.