{"slug":"form-input-ux-review","name":"Form Input UX Review","version":"1.0.0","updated_at":"2026-10-30T01:54:45.964Z","use_when":"Reviews the HTML or JSX of one form for four input mistakes that frustrate people while they type, and lists only those, one line each with a fixed code, the field, why it hurts the user and the fix - or exactly No findings. It catches paste blocked on a password field, a field that holds a code, a ZIP code or a card number set to type number, or an email address or phone number left as plain text with no type or input mode, autocomplete switched off or given a wrong token on password, username and one-time-code fields, and a submit button disabled until the whole form is valid so the person never learns what is missing. It leaves out the safe look-alikes: a real quantity as type number with a minimum and a maximum, autocomplete off on a site search box, and a button disabled only while the request is running. Use to review a sign-in, sign-up, checkout or contact form before release, or to find why mobile keyboards and password managers misbehave.","not_for":"Labels, accessible names and missing autocomplete on personal-data fields, validation logic on the server, visual design and anything that needs a browser to see. It reads the markup of one pasted form and judges only what is written in it.","languages":["en"],"tags":["forms","html-inputs","autocomplete","mobile-keyboard","ux","code-review"],"category":"code","category_url":"https://aiskills402.com/categories/code","keywords":["type number","password manager","one-time-code","submit button"],"faq":[{"q":"Seats or tickets as type number: is that reported?","a":"No. A real quantity with a minimum and a maximum is what the number type is for. The skill reports the type only for values that are made of digits but are not counted, such as a verification code, a ZIP code or a card number, where the documentation advises text with a numeric input mode."},{"q":"Why is autocomplete off on a search box left alone?","a":"Because a search box is not a credential, and switching off the browser's suggestions there is a normal choice. The skill reports off, or a wrong token, only on password, username and one-time-code fields, where browsers often ignore off and a wrong token stops a password manager."},{"q":"Which paste blocks are reported?","a":"Only those on password fields. The standards guidance read for this skill asks verifiers to permit paste when a password is entered, so people who rely on a password manager are not locked out. Blocking paste on other fields is outside the four codes."},{"q":"What forms were used in the check?","a":"A checkout form with an email typed as text, a ZIP code as number and a code field with autocomplete off; a sign-up form with blocked paste and a button disabled until valid; and a clean workshop form. Sonnet and Haiku answered each once, and the hand-read verdicts are in the test summary."}],"examples":[{"lang":"en","model":"claude-sonnet-5-5","input_excerpt":"<header>\n  <form role=\"search\" action=\"/search\">\n    <label for=\"q\">Search the shop</label>\n    <input id=\"q\" name=\"q\" type=\"search\" autocomplete=\"off\">\n  </form>\n</header>\n\n<form action=\"/checkout\" method=\"post\">\n  <label for=\"email\">Email</label>\n  <input id=\"email\" name=\"email\" type=\"text\" autocomplete=\"email\" required>\n\n  <label for=\"zip\">ZIP code</label>…","output_excerpt":"WRONG-INPUT-TYPE — zip, `type=\"number\"` on a postal code — spinner arrows and accidental increments appear, and leading zeros can be lost — use `type=\"text\"` with `inputmode=\"numeric\"` and a `pattern`\nWRONG-INPUT-TYPE — email, `type=\"text\"` with no input mode — the phone shows the ordinary keyboard, without the at sign within reach — use `type=\"email\"`…"}],"page_url":"https://aiskills402.com/skills/form-input-ux-review","markdown_url":"https://aiskills402.com/skills/form-input-ux-review.md","image_url":"https://cdn.aiskills402.com/og/skills/form-input-ux-review/a73c3b21.png","related_url":"https://api.aiskills402.com/v1/skills/form-input-ux-review/related","purchases_count":null,"tested":{"date":"2026-10-29","strong":{"model":"claude-sonnet-5-5 (Claude Code alias \"sonnet\")","verdict":"Right on all 3 cases, read by hand. On the checkout form it named the email address left as plain text, the ZIP code set to type number and the verification code with autocomplete off, and left out the quantity as type number with limits and the site search box with autocomplete off. On the sign-up form it gave the blocked paste on both password fields and the create button disabled until valid, and left out the invitation button disabled only while sending. On the clean workshop form it answered exactly No findings. It listed the email and the ZIP code as two lines instead of one, which the checks accept."},"weak":{"model":"claude-haiku-5-5 (Claude Code alias \"haiku\")","verdict":"Right on all 3 cases, read by hand. It gave the same findings as Sonnet on the checkout form (email and ZIP code on two lines) and on the sign-up form, with the same safe look-alikes left out, and answered exactly No findings on the clean workshop form. Four of its lines were indented by four spaces, which the checks accept."},"note":"Light test: three cases (two planted, one clean), one run per model; no comparison without the skill. The forms were written by us; each planted case carries a safe look-alike (a quantity as type number with limits, autocomplete off on a search box, a button disabled only while sending), and neither planted case has a comment pointing at the defect. A fifth code the brief suggested, autocapitalize and spellcheck on username or code fields, was dropped because no official page read on 29 October 2026 supports it, and paste blocking is limited to password fields, the only kind the standards text covers. Facts come from MDN, web.dev and NIST pages, read on 29 October 2026; there are no owner-measured facts.","report_url":null},"price_usd":"0.01","price_micro":10000,"size_bytes":7811,"sha256":"db2b7e145f7ba96697f2b77ffa5295000cc0060d5c5f9e2b52b1b2616a33e87c","outline":["The answer","The codes","How to read the markup","Rules","Work in this order","Short example"],"license":{"summary":"Perpetual, non-exclusive; use and modify for yourself incl. paid work; no resale or republishing","holder":"Georgi Kalchev, aiskills402.com","url":"https://aiskills402.com/docs#license"},"buy_url":"https://api.aiskills402.com/v1/skills/form-input-ux-review/file","redownload_url_template":"https://api.aiskills402.com/v1/purchases/{token}","mcp_tool":null,"payment":{"protocol":"x402","scheme":"exact","asset":"USDC","selling":true,"network":"base","network_caip2":"eip155:8453","pay_to":"0xbc0dcc70d8b5d85541d86ffc68d988fd59c22e68","facilitator":"cdp"},"seo_title":"Form Input UX Review","seo_description":"Finds blocked paste, wrong input types, autocomplete off on logins and submit buttons disabled until valid in HTML forms. Pay $0.01 once, in USDC.","versions":[{"version":"1.0.0","date":"2026-10-30","changelog":"# Changelog\n\n## 1.0.0 — 2026-10-29\n\nFirst release, written in the light-test batch of 29 October 2026 (three cases, price $0.01). The idea is ours; no foreign skill was opened, facts come from MDN, web.dev and NIST pages (see notes/ideas.md). Output: one line per finding with a fixed code, or exactly `No findings.`\n\nTest: three cases written by hand (two planted, each with a safe look-alike, one clean control), one run on Claude Sonnet and one on Claude Haiku, no run without the skill, no iteration on the skill text after the runs. `test/control.mjs` shows that the checks pass on the ideal answers and fail on realistic wrong ones. See `test-summary.json` for the verdicts read by hand.\n"}]}