nextjs-tanstack-query

Pass

Audited by Gen Agent Trust Hub on Apr 3, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: The skill contains a standard surface for indirect prompt injection as it processes data retrieved from external and internal APIs. * Ingestion points: Data is fetched via fetch calls within references/hydration.md and references/query-patterns.md. * Boundary markers: Not present; the instructions do not specify delimiters for untrusted API content. * Capability inventory: The skill scope is limited to data fetching and state management; it does not include dangerous tools like arbitrary command execution or file system modification based on API data. * Sanitization: No explicit sanitization of API responses is documented in the provided code examples.
  • [COMMAND_EXECUTION]: Recommends standard project initialization commands such as bun add for installing required dependencies.
  • [EXTERNAL_DOWNLOADS]: References official and well-known libraries @tanstack/react-query and @tanstack/react-query-devtools from the public package registry.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 3, 2026, 10:59 AM
Security Audit — agent-trust-hub — nextjs-tanstack-query