start-core
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the agent to use the
@tanstack/cliandgitpicktools vianpxto scaffold projects. These commands fetch and execute code from the official TanStack organization's repositories. - [EXTERNAL_DOWNLOADS]: The skill includes a project template that defines dependencies on standard ecosystem packages (e.g.,
@tanstack/react-router,vite,react) hosted on the official npm registry. - [SAFE]: The instructions include security-conscious guidance regarding isomorphic execution. Specifically, it warns that loaders run on both server and client, and directs developers to use
createServerFnto handle sensitive data like environment variables or database access to prevent credential leakage to the browser.
Audit Metadata