tanstack-query

Pass

Audited by Gen Agent Trust Hub on Aug 25, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes local maintenance scripts such as tools/skill/quick_validate.py and tools/skill/check_tanstack_skills.py, and the tanstack CLI for information retrieval.
  • [PROMPT_INJECTION]: The skill processes external information that may contain adversarial instructions.
  • Ingestion points: Documentation retrieved through the tanstack CLI (tanstack search-docs, tanstack doc), source code within node_modules, and community-provided examples (DeckardGer/tanstack-agent-skills).
  • Boundary markers: None identified for delimiting external content.
  • Capability inventory: Execution of Python scripts, documentation lookup commands, and file system read access.
  • Sanitization: No content validation, escaping, or filtering is specified for the ingested documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 25, 2026, 01:38 PM
Security Audit — agent-trust-hub — tanstack-query