tanstack-hotkeys
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFE
Full Analysis
- [UNVERIFIABLE_DEPENDENCIES]: The documentation references installation of official packages from the @tanstack organization (e.g., @tanstack/react-hotkeys, @tanstack/hotkeys-devtools) using package managers such as bun and npm. These are standard dependencies for the project.
- [INDIRECT_PROMPT_INJECTION]: The skill documents tools for recording user-provided keyboard shortcuts (e.g., useHotkeyRecorder). While this represents a potential surface for processing untrusted data, the instructions emphasize using built-in validation and normalization helpers like validateHotkey and normalizeHotkey to mitigate risks.
Audit Metadata