react-tanstack-router
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a development guide and template provider for building React single-page applications. The code patterns provided follow modern security and architectural standards, such as the SOLID principles mentioned in the objectives.
- [INDIRECT_PROMPT_INJECTION]: While the skill involves processing untrusted data from URL parameters and search queries, it explicitly enforces the use of Zod validation schemas (
validateSearch: zodValidator(searchSchema)). This practice effectively sanitizes incoming data and prevents injection attacks by ensuring input conforms to expected types and constraints. - [EXTERNAL_DOWNLOADS]: The skill instructs the installation of standard industry packages from official registries. These include
@tanstack/react-router,zod, and@tanstack/react-query, all of which are widely used, well-maintained, and originated from reputable sources. - [CREDENTIALS_UNSAFE]: Templates for authentication and API communication utilize environment variables (
import.meta.env.VITE_API_URL) rather than hardcoding sensitive information. The login templates demonstrate standard credential handling practices within the context of a frontend application.
Audit Metadata