deco-to-tanstack-migration
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate technical documentation and templates for application migration, following industry-standard practices for web development and Cloudflare Workers deployment.
- [SAFE]: Secret management is handled securely by advising developers to use environment variables and Cloudflare Worker secrets rather than hardcoded credentials.
- [SAFE]: The skill includes explicit security guidance, such as warning against the inclusion of server-side secrets in client-side bundles (Gotcha #71), demonstrating a proactive security posture.
- [SAFE]: Architecture patterns like createServerFn are used to securely proxy API calls to backend commerce systems (VTEX, Shopify), effectively managing CORS and protecting sensitive tokens.
- [SAFE]: All identified third-party libraries and external service connections (e.g., TanStack, React, Sentry, PostHog) are established services appropriate for the skill's context.
Audit Metadata