Agent skill

Form Types Validation

by dev-toolings in dev-toolings/superpowers-symfony

Build Symfony forms with custom Form Types, validation constraints, HTTP 422 handling, and multi-step flows

MITAuto-check: notes

Install Form Types Validation

skills CLI
$ npx skills add dev-toolings/superpowers-symfony --skill form-types-validation -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install dev-toolings/superpowers-symfony form-types-validation --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/dev-toolings/superpowers-symfony.git skills-src && mkdir -p .claude/skills && cp -r skills-src/content/skills/form-types-validation .claude/skills/form-types-validation && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
form-types-validation
GitHub stars
222
Token cost
~497 tokens
SKILL.md length
235 words
Files
2
Skills in repo
44
Repo updated
First seen
Licence
MIT

At a glance

Build Symfony forms with custom Form Types, validation constraints, HTTP 422 handling, and multi-step flows

  • Works in 5 steps: Put business constraints on the entity… → Build the form type with explicit field… → Split rules into validation groups when… → …
  • SKILL.md covers Use when, Default workflow, Guardrails and Progressive disclosure, plus 2 more sections
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Form Types Validation is an agent skill from dev-toolings/superpowers-symfony. Build Symfony forms with custom Form Types, validation constraints, HTTP 422 handling, and multi-step flows

Its SKILL.md is about 500 tokens, which your agent loads only when the skill is triggered. The skill folder holds 1 other file (for example `reference.md`).

It works with Symfony. The repository describes itself as: Claude Code plugin for Symfony 7.4 LTS & 8.x — 44 skills, 7 AI subagents & 13 commands for API Platform v4, Doctrine ORM 3, TDD (Pest/PHPUnit), Messenger, security & DDD. The licence is MIT.

Example prompts

  • “/form-types-validation”

Requirements

  • Pre-approved tools (allowed-tools): Read, Glob, Grep, Write, Edit, Bash

Workflow steps

5 steps, taken from the first numbered list in SKILL.md.

  1. Put business constraints on the entity or DTO; keep form-level constraints for UI-only rules such as uploads.
  2. Build the form type with explicit field types and options.
  3. Split rules into validation groups when contexts differ.
  4. Add data transformers or PRE_SET_DATA/PRE_SUBMIT listeners only where the model and the view disagree.
  5. In the controller, check isSubmitted() && isValid() and pass the form itself to render().

What it can do on your machine

Read from SKILL.md and the folder at commit 459bcd0. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves these tools, so the agent can use them without asking each time:

    • Read
    • Glob
    • Grep
    • Write
    • Edit
    • Bash

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Form Types Validation loads about 497 tokens when it runs. Until then it costs about 32 tokens; SKILL.md has 235 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~32
When it runs · the whole SKILL.md, loaded when a task matches
~497

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check: notes

The automated check noted patterns worth knowing about, such as sudo or a known installer.

  • NotePre-approves every shell command (allowed-tools: Bash)SKILL.md
    allowed-tools: Read, Glob, Grep, Write, Edit, Bash

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from dev-toolings/superpowers-symfony at commit 459bcd0, republished under its MIT licence (© dev-toolings). 235 words, ~497 tokens.

Download SKILL.mdSave it as .claude/skills/form-types-validation/SKILL.md (or your agent's skills folder). This skill also uses 1 other file; get the full folder from GitHub.
name
form-types-validation
description
Build Symfony forms with custom Form Types, validation constraints, HTTP 422 handling, and multi-step flows
allowed-tools
Read, Glob, Grep, Write, Edit, Bash
capabilities
read, search, edit, shell
tags
security

Form Types Validation (Symfony)

Use when

  • Building or changing a Symfony form type.
  • Adding validation constraints on an entity, a DTO, or a form field.
  • Different rules per context (registration vs profile) through validation groups.
  • Converting values with a data transformer or reacting with form events.
  • Writing a custom constraint, or a form spread across several steps.

Default workflow

  1. Put business constraints on the entity or DTO; keep form-level constraints for UI-only rules such as uploads.
  2. Build the form type with explicit field types and options.
  3. Split rules into validation groups when contexts differ.
  4. Add data transformers or PRE_SET_DATA/PRE_SUBMIT listeners only where the model and the view disagree.
  5. In the controller, check isSubmitted() && isValid() and pass the form itself to render().

Guardrails

  • Pass the form, not createView(), to render() so an invalid submit answers 422.
  • A transformer that cannot convert throws TransformationFailedException, it never returns garbage.
  • Do not duplicate the same constraint on the form and on the entity.
  • Multi-step flows and the custom violation mapper are recent: verify the installed Symfony version first.

Progressive disclosure

  • Use this file for execution posture and risk controls.
  • Open references when deep implementation details are needed.

Output contract

  • Form types and the constraints they rely on, with their groups.
  • Transformers, listeners or custom constraints, each with a reason.
  • Tests for a valid submit, an invalid submit (422), and each custom constraint.

References

  • reference.md

© dev-toolings, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 1 other file in content/skills/form-types-validation of dev-toolings/superpowers-symfony.

  • SKILL.md
  • reference.md

Open the folder on GitHubat commit 459bcd0

Compare with similar skills

Form Types Validation next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Form Types Validation compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Form Types Validation this skilldev-toolings/superpowers-symfony222—~497Automated safety check: NotesMIT
Sync Translationssymfony/symfony31k—~1.9kAutomated safety check: PassMIT
Bug Triagesymfony/symfony31k—~1.9kAutomated safety check: PassMIT
Merge Upsymfony/symfony31k—~4kAutomated safety check: PassMIT
PR Mergesymfony/symfony31k—~3.1kAutomated safety check: PassMIT
Security Triagesymfony/symfony31k—~2.6kAutomated safety check: PassMIT

Similar skills

  • Sync Translations

    symfony/symfony

    Synchronize translation catalogs across maintained Symfony branches: find messages that newer branches added to the English catalogs but that are still missing from the oldest maintained branch…

    31k GitHub stars~1.9k tokensUpdated today
    Writing & ContentAuto-check passed
  • Bug Triage

    symfony/symfony

    Decide whether open Bug PRs target the correct branch. An agent skill from symfony/symfony.

    31k GitHub stars~1.9k tokensUpdated today
    DevelopmentAuto-check passed
  • Merge Up

    symfony/symfony

    Cascade-merge maintained Symfony branches from oldest to newest (e.g.

    31k GitHub stars~4k tokensUpdated today
    DevelopmentAuto-check passed
  • PR Merge

    symfony/symfony

    Merge a reviewed pull request the way the Symfony core team does: one --no-ff merge commit per PR, whose message archives the whole discussion, with the review gates checked first.

    31k GitHub stars~3.1k tokensUpdated today
    DevelopmentAuto-check passed
  • Security Triage

    symfony/symfony

    Triage a reported security finding into a disposition: a private CVE (coordinated disclosure + advisory), a public hardening PR (fix in the open, no CVE), or not-a-security-issue (reply to reporter).

    31k GitHub stars~2.6k tokensUpdated today
    SecurityAuto-check passed
  • Review a change (a PR, the current branch diff, or a set of files) or audit a component or the whole tree for missing or incorrect security hardening.

    31k GitHub stars~2.9k tokensUpdated today
    SecurityAuto-check passed

More from dev-toolings/superpowers-symfony

All 44 skills in this repo
  • Symfony Scheduler

    dev-toolings/superpowers-symfony

    Schedule recurring tasks with the Symfony Scheduler component (native since 7.x); define schedules, triggers, and integrate with Messenger

    222 GitHub stars~526 tokensUpdated 2 days ago
    Auto-check: notes
  • API Platform Dto Resources

    dev-toolings/superpowers-symfony

    Map entities to API DTOs in API Platform (v5, 4.4, 4.3) with the Symfony Object Mapper ([Map], stateOptions) for decoupled input/output contracts

    222 GitHub stars~593 tokensUpdated 2 days ago
    Auto-check: notes
  • API Platform Filters

    dev-toolings/superpowers-symfony

    Implement API Platform filters - Parameters API (QueryParameter, v5/4.4/4.3) and the [ApiFilter] attribute deprecated since 4.4 - for search, date, range, boolean, and custom filtering

    222 GitHub stars~610 tokensUpdated 2 days ago
    Auto-check: notes
  • API Platform Resources

    dev-toolings/superpowers-symfony

    Configure API Platform resources (v5, 4.4, 4.3) with explicit operations, pagination, and typed OpenAPI for clean, versioned REST/GraphQL APIs

    222 GitHub stars~560 tokensUpdated 2 days ago
    Auto-check: notes
  • API Platform Security

    dev-toolings/superpowers-symfony

    Secure API Platform resources with security expressions, voters, securityPostValidation, and operation-level access control

    222 GitHub stars~551 tokensUpdated 2 days ago
    Auto-check: notes
  • API Platform Serialization

    dev-toolings/superpowers-symfony

    Control API Platform serialization with groups, [Context], IRI links (readableLink/writableLink), and custom context builders

    222 GitHub stars~519 tokensUpdated 2 days ago
    Auto-check: notes

Works with

Questions about Form Types Validation

What does Form Types Validation do?

Build Symfony forms with custom Form Types, validation constraints, HTTP 422 handling, and multi-step flows. Form Types Validation is an agent skill from dev-toolings/superpowers-symfony.

How do I install Form Types Validation in Claude Code?

Run `npx skills add dev-toolings/superpowers-symfony --skill form-types-validation -a claude-code`. Or copy the skill folder (content/skills/form-types-validation in dev-toolings/superpowers-symfony) into .claude/skills/form-types-validation in your project. Claude Code loads it when a task matches its description.

How do I install Form Types Validation in Codex?

Run `npx skills add dev-toolings/superpowers-symfony --skill form-types-validation -a codex`. Or copy the skill folder (content/skills/form-types-validation in dev-toolings/superpowers-symfony) into .agents/skills/form-types-validation in your project. Codex loads it when a task matches its description.

Can I use Form Types Validation in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add dev-toolings/superpowers-symfony --skill form-types-validation -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/form-types-validation, .gemini/skills/form-types-validation, .github/skills/form-types-validation and .opencode/skills/form-types-validation in your project.

What does Form Types Validation need to run?

SKILL.md names no scripts, command-line tools or credentials: Form Types Validation is instructions for the agent only. Its frontmatter pre-approves these tools: Read, Glob, Grep, Write, Edit, Bash.

Does Form Types Validation access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Form Types Validation safe to install?

Our automated static check of SKILL.md found notes only (pre-approves every shell command (allowed-tools: bash)), nothing it rates as a warning. It is not a guarantee. Review the folder before installing.

What licence does Form Types Validation use?

Form Types Validation is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Form Types Validation use?

About 497 tokens (SKILL.md is roughly 2k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Form Types Validation?

Skills that share tags, products or a category with Form Types Validation: Sync Translations (symfony/symfony, 31k stars), Bug Triage (symfony/symfony, 31k stars), Merge Up (symfony/symfony, 31k stars) and PR Merge (symfony/symfony, 31k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Form Types Validation?

dev-toolings (a GitHub organization) maintains it in dev-toolings/superpowers-symfony, which has 222 GitHub stars. The repository holds 44 skills in this directory. The repository was last updated on October 5, 2026.

Source: dev-toolings/superpowers-symfony on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.