TanStack Table
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides standard installation commands for official
@tanstackpackages. These are benign and necessary for the described functionality. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill provides patterns for fetching data from
/api/endpoints. There is no evidence of exfiltrating sensitive local data (e.g., SSH keys, credentials) to external or unauthorized domains. - [REMOTE_CODE_EXECUTION]: The templates demonstrate standard React component and Cloudflare Worker patterns. No dynamic code generation (
eval,exec) or remote script execution (pipingcurltobash) is present. - [INDIRECT_PROMPT_INJECTION]: The skill processes table data but includes appropriate boundary markers and uses standard React rendering methods (
flexRender). While a surface for processing untrusted data exists in any UI component, the provided code follows best practices for sanitization. - [PRIVILEGE_ESCALATION]: No commands requiring elevated privileges (e.g.,
sudo,chmod 777) are included. - [OBFUSCATION]: The code and documentation are written in clear, plain text with no hidden or encoded segments.
- [PERSISTENCE]: The skill does not attempt to modify shell profiles or system startup services.
- [DYNAMIC_EXECUTION]: No usage of unsafe deserialization or runtime compilation was found. The patterns strictly adhere to standard TypeScript and JavaScript development workflows.
Audit Metadata