tanstack-react-query-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of educational documentation and code snippets providing best practices for React Query development. It does not contain executable scripts, network-active code, or privileged commands.
- [SAFE]: Explicitly includes security-focused guidelines in
references/actor-identity-and-secrets.md, instructing developers never to include bearer tokens, API keys, or other credentials in query keys to prevent exposure in developer tools, logs, or persistence layers. - [SAFE]: Recommends the use of validation libraries (such as Valibot) to parse and decode user-controlled form data before executing state-changing mutations, which is a key defense against processing malformed or malicious inputs.
Audit Metadata