tanstack-router-conventions

Pass

Audited by Gen Agent Trust Hub on Sep 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns or security issues were detected during the analysis.
  • [EXTERNAL_DOWNLOADS]: The skill references standard community libraries including 'jsurl2' and official '@tanstack' packages for developer tooling and routing functionality.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for handling untrusted data via URL search parameters. It mitigates potential risks by mandating strict validation and sanitization.
  • Ingestion points: URL search parameters are processed in references/params-search-ui-routes.md and references/map-search-param.md.
  • Boundary markers: Not applicable as the skill focuses on technical implementation rather than natural language prompt boundaries.
  • Capability inventory: The skill logic is limited to documentation and does not perform dangerous operations like arbitrary code execution or network exfiltration on the data.
  • Sanitization: The skill enforces the use of Zod 4 for schema validation, type coercion, and strict filtering of all incoming URL parameters.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 7, 2026, 10:34 AM
Security Audit — agent-trust-hub — tanstack-router-conventions