tanstack-query
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local maintenance scripts such as
tools/skill/quick_validate.pyandtools/skill/check_tanstack_skills.py, and thetanstackCLI for information retrieval. - [PROMPT_INJECTION]: The skill processes external information that may contain adversarial instructions.
- Ingestion points: Documentation retrieved through the
tanstackCLI (tanstack search-docs,tanstack doc), source code withinnode_modules, and community-provided examples (DeckardGer/tanstack-agent-skills). - Boundary markers: None identified for delimiting external content.
- Capability inventory: Execution of Python scripts, documentation lookup commands, and file system read access.
- Sanitization: No content validation, escaping, or filtering is specified for the ingested documentation.
Audit Metadata