tanstack-start-conventions
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized access attempts were detected. The skill provides standard documentation and architectural templates for web development.
- [INDIRECT_PROMPT_INJECTION]: The skill outlines patterns for processing untrusted data through API routes and server functions. While this creates a potential attack surface for indirect prompt injection, the skill mitigates the risk by mandating strict validation practices.
- Ingestion points: Data enters the application context through API handlers (via
request.urlandrequest.json()inreferences/params-search-api-routes.md) and server functions (via.validator()inreferences/server-functions.md). - Boundary markers: The skill enforces the use of Zod schemas and
.validator()blocks to delimit and validate external input before it reaches application logic. - Capability inventory: Sensitive capabilities such as database updates (described in
references/server-functions.md) and filesystem access (referenced inreferences/execution-model.md) are gated behind these validation layers. - Sanitization: All input is required to be parsed and validated using Zod, ensuring data conforms to expected types and constraints before processing.
Audit Metadata