tanstack-virtual
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the installation of the
@tanstack/react-virtualNode.js package, which is a well-known and reputable library for rendering large datasets efficiently in React.- [INDIRECT_PROMPT_INJECTION]: The skill provides React templates that ingest external data for list rendering. \n - Ingestion points: The
itemsprop in components within SKILL.md and references/patterns.md. \n - Boundary markers: None; data is rendered directly using standard React patterns. \n
- Capability inventory: The skill focus is restricted to UI rendering logic and does not include any capabilities for shell execution, file system access, or network operations. \n
- Sanitization: The examples utilize default React rendering without additional filtering for instructions that might be embedded in the data.
Audit Metadata