tanstack-table
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill contains multiple references to official TanStack Table documentation and raw source files hosted on GitHub (e.g.,
github.com/TanStack/table). It also provides instructions for installing framework packages from the standard public registry using thebun addcommand. These resources are from a well-known open-source ecosystem and are documented neutrally for educational and implementation purposes.\n- [PROMPT_INJECTION]: The skill facilitates the creation of data-driven tables, which presents an inherent surface for indirect prompt injection if the ingested data contains malicious instructions.\n - Ingestion points: The
dataandcolumnsproperties provided to theuseTablehook in React components (e.g., inreferences/setup-core.md).\n - Boundary markers: None explicitly documented; the skill relies on standard React JSX structure for data/instruction separation.\n
- Capability inventory: The skill includes capabilities for package installation (
bun add) and mentions browser-based verification smoke tests inSKILL.md.\n - Sanitization: Content rendering is handled through TanStack Table's
FlexRenderutility, which leverages standard React security features (such as automatic escaping of text content) to mitigate common injection risks during the display process.\n- [SAFE]: The skill is primarily composed of technical documentation and code examples for a legitimate UI library. No evidence of malicious intent, obfuscation, or unauthorized data access was found.
Audit Metadata