tanstack-start
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill provides comprehensive security guidance, including mandatory CSRF middleware configuration when using custom server entrypoints and strict environment variable isolation practices (e.g., using
process.envonly in per-request server callbacks). - [SAFE]: It emphasizes data boundary security, instructing the agent to authorize every server function and server route rather than relying on UI-level route guards.
- [EXTERNAL_DOWNLOADS]: The skill facilitates project scaffolding and reference material acquisition via official sources, such as the
@tanstack/cliand theTanStack/routerGitHub repository. These activities are limited to well-known, official framework resources. - [SAFE]: The skill advocates for industry-standard session management, recommending
HttpOnly,Secure, andSameSitecookie flags, as well as opaque session IDs with database-backed revocation.
Audit Metadata