tanstack-router
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: References and installs packages and CLI tools from the official TanStack organization (e.g.,
@tanstack/react-router,@tanstack/cli).- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for handling untrusted external data from URL search and path parameters. - Ingestion points: Data enters through
validateSearch,params.parse, andloaderfunctions as documented inreferences/navigation-url-state.mdandreferences/loaders-context-errors.md. - Boundary markers: The skill instructs users to implement schema validation (e.g., Zod) within the
validateSearchhook to define input boundaries. - Capability inventory: Includes network fetching via loaders and local file system modifications through automated route tree generation (
tsr generate). - Sanitization: External data is sanitized and normalized using type-safe validation hooks before being consumed by application components.
Audit Metadata