The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill recommends installing official TanStack packages from the npm registry.
Evidence: npm install @tanstack/react-form, @tanstack/react-devtools, and meta-framework adapters like @tanstack/react-form-nextjs.
These are recognized official packages for the TanStack ecosystem and are considered safe.
[INDIRECT_PROMPT_INJECTION]: The skill describes patterns for building user-facing forms that ingest untrusted data from UI inputs.
Ingestion points: User input via standard HTML elements (input, checkbox, select) in components like App and TextField (documented in rules/val-validation.md and rules/ui-libraries.md).
Boundary markers: None (standard form architecture).
Capability inventory: The skill demonstrates onSubmit handlers that can perform network operations (saveToServer, fetchUser) or update state (documented in rules/form-setup.md and rules/sub-submission.md).
Sanitization: The skill strongly promotes the use of schema validation libraries such as Zod, Valibot, and ArkType to validate and parse untrusted data (documented in rules/val-schema-validation.md).

tanstack-form