tanstack-start-architecture
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use standard command-line tools such as
ls,grep, andrg(ripgrep) to verify the project structure and audit source code for architectural violations. These commands are executed locally for static analysis purposes and do not involve privilege escalation or dangerous modifications. - [EXTERNAL_DOWNLOADS]: The skill references official TanStack documentation and GitHub release pages (e.g.,
tanstack.com,github.com/TanStack) to provide context on framework API behavior. These are well-known, trusted technology service domains, and no instructions to download or execute external scripts were found. - [PROMPT_INJECTION]: No malicious prompt injection patterns, such as instructions to override safety guidelines, disregard previous rules, or switch to developer modes, were detected. The skill is highly structured and maintains its intended auditing focus.
- [DATA_EXFILTRATION]: There are no patterns suggesting data exfiltration. On the contrary, the skill contains specific 'Safety policy' rules designed to detect and prevent data exposure and secret leaks (e.g., hardcoded DB clients or secrets in isomorphic code) within the target project's codebase.
Audit Metadata