tanstack-frontend
Fail
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: CRITICALINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a framework for processing external data from server-side functions and URL parameters, which represents an attack surface for indirect instructions. \n
- Ingestion points: Data enters the application context via
createServerFn(RPC functions),useQuery/useSuspenseQuery(client-side data fetching), and routeparamsorsearchparameters as described inreferences/tanstack-router-query.md. \n - Boundary markers: The skill mandates strict validation using Zod schemas for all route inputs (
params.parse,validateSearch) and server function data (.validator). \n - Capability inventory: The application can execute network requests (mutations/queries), navigate users via the router, and handle form submissions. \n
- Sanitization: Data is parsed and validated against schemas before reaching the UI, and the architecture relies on React's default XSS protections during rendering. \n- [EXTERNAL_DOWNLOADS]: The skill contains references to documentation and community resources. \n
- Automated scanners flagged the
tanstack.devdomain as blacklisted and markedreferences/data-access.mdas malicious. \n - Technical analysis identifies
tanstack.devas a well-known service domain (formerly the primary documentation site for TanStack) that currently redirects to the officialtanstack.comsite. \n - The file
references/data-access.mdcontains purely technical markdown documentation and code examples consistent with established React Query patterns. \n - According to trust rules for well-known technology services, these references are considered legitimate documentation links and do not contribute to verdict escalation.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata