tanstack-start

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: The skill provides comprehensive security guidance, including mandatory CSRF middleware configuration when using custom server entrypoints and strict environment variable isolation practices (e.g., using process.env only in per-request server callbacks).
  • [SAFE]: It emphasizes data boundary security, instructing the agent to authorize every server function and server route rather than relying on UI-level route guards.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates project scaffolding and reference material acquisition via official sources, such as the @tanstack/cli and the TanStack/router GitHub repository. These activities are limited to well-known, official framework resources.
  • [SAFE]: The skill advocates for industry-standard session management, recommending HttpOnly, Secure, and SameSite cookie flags, as well as opaque session IDs with database-backed revocation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 11:14 AM