tanstack-start-security
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill suggests using standard development tools and CLI utilities such as
ripgrep(rg),sed, andpnpm(lint, test, build) to audit the local codebase for security patterns and verify project integrity. These commands are localized to the user's project environment. - [EXTERNAL_DOWNLOADS]: The documentation includes links to official documentation for TanStack (tanstack.com) and Better Auth (better-auth.com). These are well-known technology services and the references are provided neutrally for developer guidance.
- [INDIRECT_PROMPT_INJECTION]: As a security auditing tool, the skill is designed to ingest and analyze external application code, which presents a potential injection surface. The skill mitigates this by providing structured validation checklists, explicit boundary markers (e.g.,
createServerFn,beforeLoad), and instructions to treat client-side inputs as untrusted until validated on the server.
Audit Metadata